A858DE45F56D9BC9 archive

201302281002 19eby2

explained decrypted filler

seed 961

Metadata

Post ID
19eby2
Title
201302281002 → 2013-02-28 10:02 on A858's clock
Posted (UTC)
2013-02-28 15:02:56
Timezone
UTC−5 · title 10:02 against posted 15:02 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302281002) = ceeb9e1a13f3b94c71b6f96f4aa7475d (name+title)
GUIDs
32
Filler GUID seed
new Random(961).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
83 · predicted N = 32 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

FB6666C1F67123F1 9C36E5E05B84CA98 EF426234D9BD6518 25726E791FAD6EAC 7BB474EA2C9531B3 FF37B755872D27D3 4F5F44388B7078A6 248F33A9C196DA88 5905EC52A1A57190 0951364612A1B600 873157AA591853D6 96C3CC2873C0A1B6 05822E77BE9B4417 5C85F9CAB086A126 F9577E8F3BC2C141 31F23633E39E616F F8CF8281BF521920 53A7E9603EC05CBF 8853068D1271BBDE 611306B3E8972623 85AB1CC4860FF118 2FF48F2B112FB07D FF0E27F87FF8A6EC ECF48484D0557C1D 78D1891840C1A843 F63A4ED7E1D722A5 80AB552E5781298E 10BA57F31A35119F 3BF41DAA57310207 FE84345CFE26806B 9CA2482C5DFC6E22 BD16A697EB0CA6EF ADEFBA1905B7CAB8 5557AA909F33A9CD 3A90B8E39724F6CF BEB0551D3B07EC28 FA79FA018760C417 7A2665E78ECB12CD E5054075BA917A62 D16D5C10BA502D94 5D9A6637326E2F20 BECCE2AFE712B51B B4F1C7D98E6F8B9F 47BC3C714A938F4D 689E46E31B76ADFE DE2C33C19C07ACDB C5A766BB5B450A6D 33D9F070636BDD8F 2221B64C7F837A45 D067FD2F8D6E2AA3 5D85EB9E60AF9EC4 26CF0D3FD691F6D5 BA64F230851E9196 C051C90E3BBCD47B 450335F1F39E5877 BCBB1D26D6CD57BC 6BBA140079FB4986 CCCD0219454BF883 904825C5F097784D 59B7086561F40004 8E4E7C6A90FB031A 2EB09EFB94403B6A 7A290DA0E5BBB70E E5EE21CDABF73CB4 F0150CA863C24511 4F64D34E7DCAD69F E4F5BF0C1D13332B E58013D7BA07E2C8 57EB04A256893EB1 7AB99490D0288A70 864DD5A40A1EFD73 89BA6465EB451E87 9339F86AAB77301A C2B00514FEDBCDE8 6FBF2B7449049976 D20826F9E9FD2A60 C30060F858048528 C33A86AAC9B27CA7 FF7749B63BAE5D33 AD3A16B1F0CF7EBC A36DEAF3760335DF FCE06D74CD4C6BBE 3A11C3EE17C783F1 78F2925B0CD54D99 91A8605532480083 941F7D1481BA7057 46D7171A070A8449 5C1B6AFF3A72711D 2A9EF25B0ECA9E64 3A2175DAA5FA64B3 BCC46AE24A060FA9 27F7D4772040168C 337FFABD97FEE078 EE94B39F96CB7C9D 3D20A30F37DD18DD B538AFC0FAC0080E BC26FBBEDFA14023 CEA4894DC9F83A5D 34EAD6E1108F9B01 825E06B7B7CA8CC7 5D2441AD71E95610 7D0E1847EE5DD70B 0C2B05A14FFB6C6F 85F46FC012622132 C446F96B6FB392F3 9A5AAF43786C18FF 8B1B1693391AF432 CBBB3331FEB19019 F957D74602568069 4C6C96C43CD60451 D54AA4AE62008606 7A52DBBDC016869C 9860BDEEAA18E76F 36C5DC040A8F2714 673DF7BB80A6F8BA 3EEB166611BA59EF F3F6BC6135E1E93B B9DAC3192DFB7F8E AC6561AC8A671DA9 C995D101A4224521 C15AC7C1014EDEF9 BC955640D007B2A3 A30E268BDAFD6EE1 BACA87C47ED440B6 2A9EEBC2243372D6 2AB2D7BA1F6C1A45 CAA1EF1F6B17A7A6 DB0D6F350F72620E 91B851A633F6D41F
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302281002 (name+title). Key = MD5(password) = ceeb9e1a13f3b94c71b6f96f4aa7475d, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9d5eb4f5-8fbd-6d1b-afc6-3050682c179f
  2 b32bedc6-0414-74c8-8b6e-bc82fb31f1e6
  3 632583e2-ccd5-4220-85d0-e84883e96346
  4 5b4c9942-908b-6e36-a9df-0bbc2083bdf7
  5 6fbff778-f500-00a0-a5f9-19b6608d4ba7
  6 40fdfb4c-5e60-3b04-84f0-b2e0b23f2d00
  7 3c0d2514-2392-4d79-b43e-9d84ac759c24
  8 6f423eb1-a774-5b02-93ae-8057536bf3af
  9 9ff5c4f5-80c9-7a9b-a4dd-9c6701e4271c
 10 00fb3c27-55cf-5fe8-a672-a5829c43acca
 11 8ecd5ce4-7d2c-2ffc-ae25-49f391522321
 12 c8f93cfd-c15b-6bc1-b2e4-657922ffcf6c
 13 ddec50f3-c63b-2a72-86c4-397986310b44
 14 bc1092fc-db25-3637-9dc1-c3dd67047635
 15 8489a3ac-84e3-598d-9801-ca783c0bb488
 16 41a43a38-54d2-167a-b0f1-d8568fd03c77
 17 91e410ff-1b9e-73da-a9d2-4b5aa48c0721
 18 f6add850-0736-7518-965d-4833fe9f4bdb
 19 59e21b27-4d1a-6929-9105-603294eb585b
 20 ea367ee2-bcae-38e0-9576-a3f0a939a022
 21 65ba3126-34a3-4e85-a0c3-4366a351cef4
 22 cee0f85a-4df3-52aa-95bb-96189248729b
 23 b23a37fb-3c5a-35e1-9891-9050c5952dd8
 24 61258d4f-154f-6991-9bf7-7c29ee72ad65
 25 9d7d6c63-f7c8-7b1f-b527-04bb14b54328
 26 912ee31e-177b-5c85-bbd4-b3268357a2f4
 27 1d3d18ff-8470-18a2-abac-a2ecc4133a1c
 28 a7b910c9-1740-183d-92fc-64fa83686137
 29 5010c614-adc9-8c07-87be-57aa8b20dc6d
 30 5a1e2a79-6ddd-04bf-a8bb-523fe2bd70ac
 31 79ee574c-c4e1-8556-be44-6b9274f1bf5a
 32 3167b164-ea2c-534a-8532-cdddb9f1c8c8

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 67460345752623517763453675118085. Exactly this sequence comes out of new Random(961).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 83 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs