A858DE45F56D9BC9 archive

201302270526 19bjxh

explained decrypted filler

seed 359

Metadata

Post ID
19bjxh
Title
201302270526 → 2013-02-27 05:26 on A858's clock
Posted (UTC)
2013-02-27 10:26:57
Timezone
UTC−5 · title 05:26 against posted 10:26 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302270526) = 5a4e109e2526866ad66860aa96589805 (name+title)
GUIDs
32
Filler GUID seed
new Random(359).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
57 · predicted N = 32 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

F06DC5699E08D71B AF3388F10ED1B954 6A7CC972A409969B B53C7EF1F95A2301 FABD06B413222C2F 2E87624D04B8496C C048BE2975366FFE C8D0BFD60302E1F7 3BCDF066A8411418 33CC247EA8B75167 5E580AD8C234999A 464618C3539C5BEB 5FFDA6C0CB30AC33 4B96EB99C5C851B5 91D80B45A1159DDF BEE3D24CB3067843 25ACCD86263168FD B53DEC65AF3C36F9 E94C5BC153330F44 80BA0484D39F14B9 D7448CB8D623ADE7 9D9727D1787609D0 B33D8A8236B18471 73D71D29D449B510 3C5A841061AB6D33 7FBCAEB976D7F52F 7D33133D6326DF90 3CEE9A1E9A0B94EB 7C98B036DE906D6C 1CA594C8C7426B76 4766CBCF70C80256 1FFA3950FDDCD185 965D524038B5557A 24B72A7156622C2F C632B2329A443EBD B5A14B5262665A08 49A33A5CC19A1936 4D30DB534E345A91 F57EB05260AC8210 D8020DAEA7171E32 8B7CF4DA431FD465 5A6EBA5E57F7988B C4CBC9185F9140F2 29F7A51434AF7634 2155175FF9B4156A F2E6DB8E7B668D27 E1504D052D217D13 C8A5C7693E726157 F2E91BED3E9C4ABF EF74A62CB3328098 A906BBF741B19A52 0D776AF7F69CE264 9B5C8687FB2356EC 00F7F4B19F438C42 5F733568FEAA418C B978DA4EDAA055B8 5B721F97CE822AF2 BDD8EA16FC9A0299 6C1CAB85F042D740 20950495F0062267 5BD7B0FE6A9B540E 0EF6E41E6858F634 66E61A3874555357 AA7ABFF6AD52BB16 9B07DFA87AB41150 BC6776DAF41472E5 09673D0E6D19DB55 643C23B142D0BEFC A40ABC7A4E2B5B4D 03027C03D94B2FAE 3BCFA1F1980298A3 410A79DE762A3C82 8BAE59984549A412 32C3FA07D5864D0F 6CEE9536A74B53A3 793DE04E2FBF09AA A5936DAF4379DB85 34B61999C1ED5F1E 02928BC28F4B37C9 8F49C5592BB8529F B472DC4CB25E005C D7221A75C3A7DC23 EA19ABB1FDF146C0 D874E6D2937AC1E9 A70540F2D0D28598 4FB4AA5021BBA9A5 E101DAC43D9680A2 8CC78DC6FC76C8EB 5E8CBA12714FFBE2 C5A533A5CF06BDE1 62E7754E0FF22C14 BB1E4DF85C7752FF 0C5228A9FDCA0635 529363D375738F4E 9CFF0CE6EA1A0B71 F36215C95A2436EF 6A0FB2CC23F47B1E 05E064330519936B E8525102153290BF A3CFC133C1152A32 9B381B610C732D43 4C2FFDA1F304A70D 7330AF2322352356 35C22D9F421B173F F9B123892319D013 66E0CEC236B35F73 2F04B2E7870B4082 8966FD68A83C40BE 0E58EAABA99DC68E BA5E0C944BBBD7CA 64C46768673E71CF AC073101927B46D5 F09EB4F5359889B8 01D0C409D5E0F1FB 4C26184A9D2637B0 EE2E67BBE32591D5 6485C02D3A2888B8 A59F0E80D9A6EFE2 B3AD2451EA485AEE 7C22349BAE00FD7A 2D76FC0CC071642C CF5B38553E2A86BF CEB16A91D9B8800A 5F21B014025E5670 00EFF20D90B1B221 02A4714A12C52971 6C094404F8FC6865 7533E4DA8A8F9447 9111545CA94ACB0F
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302270526 (name+title). Key = MD5(password) = 5a4e109e2526866ad66860aa96589805, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b8cd2ef8-8562-2390-8274-0ffd8f8fc2e8
  2 80aae0e0-4ec9-1143-a441-8a29edd5ec4b
  3 2d6a7663-14c0-6e26-b16f-5af302fc48a9
  4 eeb83c12-dd05-1764-bd7d-027a7df4d8cc
  5 5b2ca5d6-1fb4-2111-a6de-54933e50da09
  6 df185254-364e-2d6a-b0e4-58b2cffb0824
  7 01e31ffc-93a7-64ca-98eb-50ed105a2251
  8 1683f54f-c0d2-46fc-8ad2-ad4d84d7a8b0
  9 2a7704af-972e-397e-807f-f417f5870f54
 10 8765008b-8237-5755-bd9e-93cfd2b378e2
 11 60359b8b-ad25-7521-86f9-18c9c0397cc7
 12 fd7da2bf-60bf-6e38-9a48-3093c2926b7f
 13 111b3aba-f686-3309-8819-0463790b8297
 14 c475f414-035c-2861-8381-d3f430039c13
 15 03a01a77-64df-2eab-bda0-8d1992f4678e
 16 21a40bae-be18-2c27-994c-85ad94252e51
 17 9ae97575-aeff-644b-b814-baf05bac06f1
 18 86ec692c-b0c0-5a69-857f-89cf7cec0b91
 19 e19b2e4e-c462-399a-9695-85bf6cb3541a
 20 a27d0fa1-2c50-253e-923b-59e181c03338
 21 24070017-ffc0-49fb-89c2-0b8a934bf3df
 22 44f6e472-ae4d-8793-8e62-529c03dac809
 23 c0c21a65-c8cd-5895-b140-49264e0d38a8
 24 cab3d082-f019-4f53-ab71-7e0ed4270f1f
 25 3fbed3b7-accb-7cc5-ad9e-5c9f97da25a9
 26 cd18f5d6-2061-3b0f-a833-e960c4d69d0a
 27 d3b87f36-6800-5ca7-9dbc-40f5a5d6fe7f
 28 eade19ed-a156-12cc-a08a-7af32549e803
 29 b9c582fb-140c-6005-89f1-64f9465a3b1c
 30 7880dbc9-687c-1348-95f3-67aeb6330a2e
 31 12aab14f-fd99-6d91-bfbe-a8808c1c0918
 32 67506ba5-c28b-001b-863e-90afb8a09582

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 21612264357632226532485473516160. Exactly this sequence comes out of new Random(359).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 57 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs