A858DE45F56D9BC9 archive

201302251244 197a8w

explained decrypted filler

seed 927

Metadata

Post ID
197a8w
Title
201302251244 → 2013-02-25 12:44 on A858's clock
Posted (UTC)
2013-02-25 17:44:59
Timezone
UTC−5 · title 12:44 against posted 17:44 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302251244) = aacb88d9a0bfb5a74ceaf78c1ac670a4 (name+title)
GUIDs
32
Filler GUID seed
new Random(927).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
20 · predicted N = 32 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

D8042A20DA335451 5292D97D7139FDEA A6ACD8542E109784 B846745FA6E9B854 080EDD3E60C6455D 8ECD77822B4A97ED 4773125D1116FDE1 15438E079DD7386F D791B2FFD732ACD0 2964AC94A5E1DCC5 65DE5D55D1EB6FFE 3BEC5CD6EE1822D8 42F6C3E2DA2E4771 5B43DFE9708812B9 5FC4F69277B49C17 03A947684664002D F33A3C8D41DE480B 66A669C6129AA181 550ED47560B7115D D22AD57D791BC178 09FB246419872A1A 8E9901C09B3429BB DD7FD0EA52A2D045 AC0E7128128D6DA8 129FCDFDABBB8765 6F8AF22BE023EC9B 4C78211C7EC9DD28 DE81151BC24B633D 69E6A872825AA1E4 F9BF6883CF6832CF 4787EC174AC3CA1B D72CAB043373E719 B76E73A65FD5BE83 77B5BD961837EF78 1EEF2933BBF71033 C94645D68BC11AF2 7DAB555D5708A6C6 292172E71CDB526E DD5AEFBD0E0B8064 7D91D9B24FC59C40 58876FCE815FC871 6078179D7ABDCD72 44F757FD7E61C68C C8E69EACE13AC694 EA055FCAED62950E AFF02B6556EB0C5B CBF7D02EF3DCDBA9 6AB0D067F2A19EAD 783EFCA31AE154C0 4EC296C1CA9381B2 9C06E7CA68F8ED26 CFE60653AE4D00D2 7FFF6C0ECB9553BA 25AA0FB5FC776091 905F16FF1C8BFDD7 985AAB435A1FC865 74E36EBAB5C48499 FC22D51CDC4DE82B FEEE986702D03376 922CD98D1736F95D B4841C0BE6299F0D C252D0FAA6F99CA1 90FDF22058381C08 554299DC1E3901DB 2D8E7868DEC7C821 7E8CC7EC9F91213E 9C5C21B796701E24 484BE54B7439A8E1 0388981898BDCC9B BD8EDA24EE5BBD1C 9274DE0E8693BB24 EFFDD75C0055BB51 C79D2B778DEF77D4 1A17891061372D81 348239DD08FDF693 AB9624935F1E094C 83EC601D545B619C A7DDA00423FCC7D6 5C0F0F91E4A83BBC 7B2D948CE0A3A220 067CF8A98C681373 BE8733737142060F AD7A24854E8EA7D7 2556F9A9C61F92B5 27D797C8F57267CB B79990DB38CC3A08 078BE8591EEA3616 CFEDFA1D51BF30A8 8C0908EA4FEE23A8 73EF6BEC459280A6 675F8FC6FF545628 1F82E55DA0839702 ACE8959FD28B4653 ECF8AA6C2DB79A64 978E381F30145346 F0BCEE132BB8EE5E 197B7381ECD72AD6 162ED19A924FC35A 7CF29E8AA3E5E675 B332581A9BA85039 7DC769E42C31A216 161666E8BC347486 66F1601D971CC043 536E6B95FF2448D9 2BE2B3EE3AE768B6 914F62F903025962 1D3B266F1D3C3B52 F6BF8F3272D43A1D E12204736131DDB3 34A68CE6A3E60472 61FDBBF5DC484BEA AA42ABCA5057AD30 2DAB8696495AAEAA B5BBC1E2A81CBB92 90B9DE711E5B8520 05CBABED992F4256 DAA942BB48940ECC DCA8A7021482BD51 0EE3483D281DBFD3 A363FED05F8E5DCB 835448122C538015 C8EB8C071FE29CB9 920AED79CD9B667F 1857383539428D06 B9AF3578FCB8362E 3FDC1ACA99A6ACE3 13D337C001ED1801 B7958A72C04C56BE EE0B04E469651DF1
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302251244 (name+title). Key = MD5(password) = aacb88d9a0bfb5a74ceaf78c1ac670a4, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 372958cf-7153-050f-b148-95b3b3a28a6b
  2 df44a08a-5046-72dc-aac5-824277e7f697
  3 c83778c2-536f-632d-8f23-9850d18914b1
  4 cd97795a-9c28-3b31-9ee3-48d923aeffa9
  5 284cf2e8-d9d9-6fbb-bfae-1cc9fae62f6e
  6 d503ad6a-8e4f-5e31-a37d-f9d6d9e57f7a
  7 157d1ed5-f16c-2406-8344-4f5bd001d760
  8 5821bb34-e635-4bfd-ae6b-f669f4e977bc
  9 1dc60925-8922-5e7d-a174-f11c7f19a938
 10 b61ced0e-f718-07c2-938e-4f277a1314e2
 11 a4ceb0e9-645f-2a98-92ea-e21ba1f6cec3
 12 1b6505fe-0419-1e99-9357-a7682f3f20d1
 13 e3cf10b6-6343-87b2-9ded-7d9d3b09a70e
 14 43ce2223-9e16-6c9f-8fe1-f2f742a05ab5
 15 8f69ddbb-8b17-7991-a3ce-f99fa881ee73
 16 897bf3ba-37d5-8a79-b5db-a8955f4d2e0b
 17 76efbbd0-60df-4bdf-a968-44edfb26a8d6
 18 694579fa-80dc-6c71-bf90-8028ad3bad2e
 19 3631bac9-9e51-6b4d-8d53-12422ad704ec
 20 dd0813f9-9dc1-2815-b975-825712e2cb4c
 21 272adb8e-ee62-8a2d-aecc-dc75c053b05b
 22 f4021e98-0fd4-23cb-b1a3-e73db204799b
 23 3509ec9b-961f-54ac-a40a-dff788f4ba24
 24 dd022f89-c7d4-7f93-ab6a-aeb48f4738ac
 25 d399fb4b-9280-40a1-a25e-f1c92f3930a4
 26 2dc86a48-0fc5-6d6e-b8e3-c2f833974958
 27 08b77fda-70d0-858c-90cf-caf5b324cd87
 28 08299ae8-1d37-0c02-aa9d-aeb8e8d300a2
 29 5ee7b3ad-54d8-5563-aaa3-a1f41edaa257
 30 70d6b501-4e36-516a-a04c-68bcb7bbb83a
 31 7fbcbc3e-e808-3ef2-b79b-33292bfc2cd8
 32 82fdbaa2-b624-552a-b31c-ced902ab7b88

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 07636524502186784662825746805535. Exactly this sequence comes out of new Random(927).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 20 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs