A858DE45F56D9BC9 archive

201303301139 1ba2mg

explained decrypted filler

seed 26

Metadata

Post ID
1ba2mg
Title
201303301139 → 2013-03-30 11:39 on A858's clock
Posted (UTC)
2013-03-30 01:39:58
Timezone
UTC+10 · title 11:39 against posted 01:39 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303301139) = 79d023a2233a8e8c3cf5d1c71e29f54d (name+title)
GUIDs
32
Filler GUID seed
new Random(26).Next(9) ✓ verified
Run
Run 43 (seed 120,022,078) (seed)
Draw
80 · predicted N = 32 ✓
Machine boot
2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

C9568A74A820F4E4 3E23514CC5457EFC F9DC385F0FCAB338 8F32C3235017899C D4199E1E398298EE 3D2E1D16EB9D32CD AC2240BEA3216A2B 7DFD6D1239E98D22 8B0A5039EEA8D1CE DA050A3FAD64F97B 08A3DF07C72D937A 38E75926192F36E3 C6454FA41D0986E3 AA6D0B6CC7A4B73D C65E7633BEAD109D 1B8591759FC7EBDC 4D83B70D2972206A 7D477F8B1193BB08 304D77EFB48D1B9B B2D73B7AE15F4F9A 579EFBAA16BC69EC ADABF7096BF70FE2 546FA7080D9D533D 60589C25DF302E34 5CB10F3B55C666B1 C494C8D5FD106061 BFB00C84E54A9BD7 2153BAAA16D8D1A9 8365D79E018A389F 9468F6755ECD5F46 0F56300CF92A7CF9 BD153043405FC198 33BA4C874CB5A6EA C62DA6EDA117059F 80700F846019E527 BF22898D22629971 C91BD777DD4B3B5A C5DAD7430779724A CABB33537F323A09 D250E287A0514A25 86ABD5FEA28AB239 6669883810C50BC6 7E72A47C5AB247EF 1F12DE3CE247B478 7A0D1813357F1F5E 9B27701C7C7E1124 75EB7502ED055FE1 9BF286E12E3AFB6F C2953341038B0A60 190F9DC1ABAA7CAF 2B31B5BE9F2EB057 E0C9AFADD16FE561 D662D7130F7DCA8F 6E8031D2E4687938 6716F989827D7D51 EB88F129DF2E831B 78E3F23026E895A2 7539EBAE0999EA7E 3F44541F1E95CBFF 7C1600AF9E591E4A 456CDAE6518C3898 0BBCC6512C26CA49 F8E3D60FF1A024DC FEA1E15E643AE576 E84D80AFD929AFE2 394D5F37510E7FB9 05F4774994ED54A8 F390D55930C2B396 38CC6BB1BAACC0E7 38305593434617ED EFC42DE5E28F4F32 3FE8513F99E2B13F 97623C85F89EE02E 7F1B38A3EEF13EEF 470097F4F063993D CEE7285DAADC8144 E3CB6023E7A516D6 400D7F99E9F661F2 8E18BA1406EEA9EA A6BA450EFA7F99EC 4DE80EEE98BFD20E 95EAAB0D5D47EDEC C70DD943E6E204EA D946549010B8B8DE 454EF8A1A57D883E D503F0293313141E E1AEBE3007EA6E5B 9BBFA2788EEAA3FD C5966DCDE27B8EFE DF1D44F69BF85CEF F4F888C71044247B 4EEF573D6BAB826F D824471145346812 72CFD552380B370E 56595C5857EA6AAF 4696C855B6EFF9B6 3B3DC9D421EFE0B7 2F28C43BB600DE4F 76E7CF67543915F5 8042BB37E2A308EE C74F58D9B846F72C 7CB8312686BD035A 045037B13FC080B7 E1149B9BA95408CD 0D766D4A85694759 6EB8B58B04295114 D56B13552D847C7D 398F1056A18DB1C3 B6A5E9A299B115CF 11BFAE38BC335E65 84929A07D6211CF8 0E725E895A216836 7A4769AC6A21BA38 1170C15F960D04D8 9AAAAF40ADE0E58C E918CCCCC6D68678 D11EDDE5DEC38C41 9983DDFB940F57B3 E90C8FF6D4C9FCCE F22AA9E1F24083B5 A169CF83B6662565 466843964DFBF7D2 813C1593797AFA49 BABE86E01D700D98 FA93E487EF0B9FA8 AEE91E5EB93B4AC6 C2FB637DFA11343D 1ADE9481A84D747B 2219D8DE927824B2
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303301139 (name+title). Key = MD5(password) = 79d023a2233a8e8c3cf5d1c71e29f54d, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0a62efad-cf4f-2f7f-8e15-75bb9c3a8200
  2 1da62249-000b-411e-adcf-ac7a4364385e
  3 e6e97753-e281-8bc0-9a10-776c8bace1a1
  4 2d0c760d-60a5-0873-a182-5137217f165a
  5 d3c2b187-161f-8b64-8105-58c986a70f25
  6 bea24ac6-b7c7-2a7e-974f-d1604e71d4a0
  7 5bc27ed1-44d1-4e90-894e-74439d4c19a8
  8 3ae03e8a-e510-4fa5-9fb6-ca4e0929d72a
  9 29f85bd5-2666-1c67-95e8-e7d7b767dd3a
 10 b15c881e-2b5c-7de8-a5c5-07ffa05669c6
 11 559fb487-8592-46c3-be65-e95e17483e9c
 12 5a1f3ee4-5006-6f8b-bd25-dbe5332ec19e
 13 ce813629-0b03-48a4-b6ea-71b5ed896e3e
 14 8ddbfa68-d3a2-8f5b-884b-ab2330c8dc4e
 15 f356b220-0c68-181f-a653-c30b290d3906
 16 a52e8ec2-f1e0-2e7f-aa70-f1d05668a255
 17 d550b43d-c3de-7b57-aa8f-c6dfba6e2c8b
 18 ae0b4834-2e53-1017-af92-e51b00e1367d
 19 f02c3a2d-d3e0-3b34-8a37-c128f94f6e9f
 20 8a39bd12-1c98-38ad-a31d-d508d0a9e4b8
 21 b05fa259-ae15-2d45-bb51-ce4b0d6c56b8
 22 edbb7acd-3737-2085-9383-5ed07743e6d2
 23 317731f3-4fe3-3e90-89fc-7da75492aa22
 24 3674ef76-ddf7-1961-9530-806b218f13c4
 25 c0b92f97-9f28-2dc7-9aff-fc7ae7c2f2e6
 26 8a38592a-9907-259b-a47d-910e67f70289
 27 45fdd01b-e555-2c9c-870b-67888892170e
 28 0a42ab2b-c416-7086-b405-ad4d60fd7beb
 29 1333e042-172e-6ba6-9713-1d2c9754f9f7
 30 564ce897-c4b7-01ec-870d-9cc0b0b805f2
 31 5834538a-043d-716d-99b5-3bebd3a76c56
 32 e47463c9-d577-269e-b1f4-f2a13b33b87c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 24808244174648127133223122276072. Exactly this sequence comes out of new Random(26).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 80 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs