A858DE45F56D9BC9 archive

201303310939 1bbuus

explained decrypted filler

seed 414

Metadata

Post ID
1bbuus
Title
201303310939 → 2013-03-31 09:39 on A858's clock
Posted (UTC)
2013-03-30 23:39:58
Timezone
UTC+10 · title 09:39 against posted 23:39 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303310939) = cd165af112100c148deffd728164417d (name+title)
GUIDs
32
Filler GUID seed
new Random(414).Next(9) ✓ verified
Run
Run 43 (seed 120,022,078) (seed)
Draw
104 · predicted N = 32 ✓
Machine boot
2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 2
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

CF4FE4E66C0EF4BE 0DF62BE4ADD6179D 526CAE20874BB21F CF28D06030F2E37D 42FB1A0F20164003 573E0E38F4396525 76F3AE46571E733E ABEDEECF44288D35 438A30FFDB562282 4EFD28D04D74BBD7 B4E7AB0F19CE3C58 2D169B82124F1F3F 9F61AF55742C7E29 F6A490A9CC779112 CBD9F8D298600D1D EAF1FCCDCA8FEB0F 78065AF3221F8C6D A1085C6996BFC5FF 174BA28A4EB4B6EE 07710596AB710E4E 943F3F976FAF1080 854F5AEBE8B4F14F FF1684935AE5F764 98A6454C5682F289 9BA3DF8CC7D62B5F D5D1DE09C6E6E502 B9261C7B5D313456 ABC09FD096BA48F2 EC0D59829118B7C6 3C732CF0E5E10021 E1C7D10396088D5D 4A508521196038A7 2E52B98233CD633F 556FD48DBE37A15A 8CB3C72DF430B75F 136FB077689B0CEF 52F624B7A5EFD795 EBBEF97B94188ECC 785DC1D3091AEA69 138323CCAC3D2F6F F8AB8100EDC73F9A D89C4F709CCA67E9 48C6AF5DB2CA3E18 335E9978501F9DE1 D003514EAD66E508 605E08A1CAE437D5 487BABF0477C48ED 9FC535D11C820336 A284B610ABD8C6DC E622F07A57019C24 0CCD02E4755D2FB9 8B518A8F8C29F0B1 B05D03F9200E687C A47B55EA7FFE8720 E2C9EC6284EE2947 36D807EF1CB1B407 0ABC0F9DC57C58E3 F4D9C63C195A361C D78492FC5E1722D7 860DB58162F8C155 66A4B8644E2BD0F1 22337E31599ABE10 B4A1AFB2D8EAFA1A 7671E59430B0FBFE 338933C40F55CD63 48A484EC4DC322DF D58CA9F71CAAAE99 599F1EDA6EF2A879 411227CB74B420FA C649B7239ACA52E6 0316A37B90A05290 B1791CD557ED8C05 B1F6CC4495EFE545 A34BFF36959723DD 3FCC0C4C76540443 C185EF6C33AA490F C7D87C759EBFFCBD 988E9FA909739A35 041C0C24F7DED297 79AEB510AA67905F E3AF303A14BCFD1F 5CDF17AE27B145B9 E872D7F41329153C 56F6F475A8D3BA14 0D3A5189431886F3 39CE72C01F803EB8 56682110201CB1C8 0AF798A19F129021 F20A9A8144B165D7 A8A94083D1B2A6B5 4937D69897720079 8755C9780E3FF635 D99831F5D6CC1967 1BA880190FBDB65E 52B7F0F2105F56A3 047879FE51C84CF8 4A3FB716CB3205C7 BC7B6B57BD945ECA 5CA8CADE5079C010 1A252D3CD6DDB2BE 0A9C6CAAB5B940E5 030CAA713AC8EDD8 57A8B383285194C4 B4E8C58D08C12DC1 FFD0681114E09B23 BFC9D919512E2DC4 6CB10AAEBBAB2BE7 8964071603B57294 5C0DAB983165008E E06FE4022AE663D6 12D5A0D1D45C5984 32791751457FEAD2 7EC45CCB952D5407 8966C6B017B01365 25907BB487E09364 A771E65C9F064122 4D1FB9BE6DC3488D 775D00A6CDCA1AED F937DE41698D919C DBB703002FDB9052 1D4E16AFE51E1550 6BD13A66B00BD83D B66DD3048F511445 CFE4A4D6F5F1B53B 0BD9EE77C7D36E42 A8F766E9B01DCFF8 A8B580312CBB8AB5 011749660738EA59 F724EF7E9D4B50FE
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303310939 (name+title). Key = MD5(password) = cd165af112100c148deffd728164417d, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 15ea2b34-9d3b-0923-97c6-1729e442b2f5
  2 f4517d6b-02f0-2810-bb88-364ebf0cb66b
  3 69ecd410-8764-175c-b358-5e0cd00c8629
  4 ddd9ac90-5824-89ba-8f6a-517dea9c8dea
  5 13dfcb2e-aa42-1395-93f2-beae866db49b
  6 b4670732-29b9-3650-8ac1-2d1d75c5a3df
  7 20df05ac-3463-3d3c-bddf-85f9e6c11241
  8 490f3922-030c-1577-b2a1-7fd3d20d774d
  9 20bffc37-8a1f-1748-a8cc-18f28671f4ad
 10 c1812f90-2418-8f6f-b5cf-0076dbfa0ea0
 11 dc74b994-ae85-2a5f-aec0-e0665701663b
 12 2c348269-0633-6d77-86ca-1542ef3ec0c8
 13 037bd1f7-1612-2fd3-b223-6dae985f9ab3
 14 88bbeeb6-e41c-7725-9efd-86b46e41c958
 15 4c2f5799-9b62-62f8-ac0b-a9777ffa6232
 16 20e422a7-fc8f-5c33-9e20-0f01c3871124
 17 87c891e9-df51-8067-9315-106d9cd35a2d
 18 c4ec6886-4b62-698e-9607-9fb2ba874454
 19 82b08bd1-0d98-760b-a9d6-e1c93fad2782
 20 d506d727-9dba-5827-b8a8-d8e729d7bf35
 21 d7980562-f5f4-7006-a11f-7f05605ba27a
 22 ea4715ff-a21f-369e-a916-975c9e207369
 23 1199a486-3df6-86a8-b030-49b3070f82d5
 24 c2f024e6-1c2c-5393-8a5d-1b9e436d4d83
 25 ea1c3977-ab97-225b-8901-014cad55d4f9
 26 8543ef9f-5747-7caf-9437-435bc5eb1e19
 27 513d5171-d9c2-78ac-8cd1-2479f1753944
 28 c06ae39a-1886-1a4f-8acf-11e497f0c718
 29 cbf919f0-d6a4-8ee8-8c42-18a524a13818
 30 e03933c4-b91c-4f88-9d5c-7cc4c772fdbf
 31 02d5f5eb-7e63-06e3-9383-3a83b52c793c
 32 79f64654-37eb-45f8-8a72-6b6685b9dd59

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 02181331182627658675738527718404. Exactly this sequence comes out of new Random(414).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 104 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs