A858DE45F56D9BC9 archive

201304031257 1bka9j

explained decrypted filler

seed 775

Metadata

Post ID
1bka9j
Title
201304031257 → 2013-04-03 12:57 on A858's clock
Posted (UTC)
2013-04-03 02:58:00
Timezone
UTC+10 · title 12:57 against posted 02:58 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304031257) = 740725e0913323e90f12e2b1d9b7021b (name+title)
GUIDs
32
Filler GUID seed
new Random(775).Next(9) ✓ verified
Run
Run 44 (seed 1,087,967,875) (seed)
Draw
6 · predicted N = 32 ✓
Machine boot
2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

EA6F26509E0799C1 375CEE9DE74A305A B8CACAE9ECADEA79 A19638C0D9A8FF83 96086861BEA3F213 3D7A960928890FD2 DC43ECC8CB68F640 B759C88E031B2F88 703B56F766591B4C E78CEEE634C72336 88E7B4096D392982 6B1AD36AA645F1D0 284A325009C55623 31B82A968F5C79C6 72C89711F631E405 ACFE1C9F8137E90E 752CD6BFFB4F2176 5BE40B1D3106DF04 D9DF68CF43C89946 0663625394D441D5 86C5D1D5B7A0C286 5E4780B8EA451F3F 65E4202CC13C9117 94E2951024678C4C 4A786A17A9FB6524 B29420C86ADB8278 923980168A445A19 402CB0B0D47685B9 E296A94096C43DCA B9E0CEB5E4DC2572 9B5A1F2B3F5438CA 0BBD391C1B563768 C58993F9FB615B0C FC46D1AC638EC380 FCC61C3FC515656F C0F1510D12CEE2B3 A8349A8BE959B9DB 630E395EA10F846A 5B28EFDD990FBAE4 B6B280D0D44461E0 1BAB4B73AC3CB8FC 735613412A732146 530E9687B731A619 C94657844BA61F99 83E21306C760512F A08A97FCEE934CB1 17C7E9AEABE8F891 95914187C3F0E7C8 2592654274A4D25B 0E39A2157A074EFB CE608C8D2EB40772 5662F7E7DFC79C16 32FEEDF79BD3E54B BC866599153BFAA3 7B33A9D77C00C038 5C0137BF1139EC81 A9CEA010449D3A2E E8B8970C16CDCBC2 ED41487E5A663FC1 8E8F81CE0DB389F7 C7A6729D019839BA BF1AF0CD6B3D65CB 1CC5B5E8BF0941DA A22F6272D186EC4B 594846CA86A5E1D3 0D19AE7B3EFFA017 087AFA8BC06C8EA6 6887616E9380A20D 08A72F8D3C393EF1 BC335E7E503C7016 C06CEDE1F97CD7F1 E0B96B38E90CC2BD 79204AABAFE269B1 2541323FBF148DC6 ABE52A8A839F5410 461C05456957C17E A0AC3635D6846D96 E72E3441929B709E C0E0AA4CFE245D65 35AA828CFA1C7892 41CB56D28E265472 FE972C0755353F2C 562470B68169AE06 657DB566445E90D0 F20CC3DF4E3A7532 449E718BCFEFAD0F F578302E0A63978E FE1DCF1752CF637C BF621E7A91475B84 9557F2F822972A53 BD3715C5FEC59C55 966F6D493BD219A3 5CC45BE3442A3542 9531B1F2FB52A347 566A046D5579C449 E604C66745ECB451 FF2F0E897E8793E8 AA5F8E1A877E3695 B507D3581D89311A A4CFBDA0BB973E4E F073D6A55E1B30C0 2AD5DAA03A19712F 30319AA6C06ECBA5 69077D8147D45F48 BC62AF13EF12CF35 6337312F12F1091F 1BFB526453159A04 EA9813D2C462B323 208CE621E82CD0EE 300FACA92853D652 0F462304E23A20AB 8D43DE1C411A93BB EE034C43D56CB7B2 EEA7048449E7298C 7A4D0D240288445E 2D9485EE934FFA3E 4BA39DB66CC2A451 159D28192E57EE60 9BA72C880786363F 8C13F787DFC1BC28 BBC96704158DA844 F3F373284869067D 6BFB10969D593C82 F79572599D90E212 FA60FFCD4A36170F 96B2A663D7F2BC5C E7D873EA0C28E5BE 0E80DFA5742A9E43 6D9330D5A2745CE0
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304031257 (name+title). Key = MD5(password) = 740725e0913323e90f12e2b1d9b7021b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9cdf0b19-bc0f-58f5-bf22-23ff3ae8c05c
  2 b5197f15-ab30-136a-871b-aa3afc3dd88d
  3 a01d958c-9bf4-4ea0-9fb3-2d55952f6320
  4 3c38d4e4-59d5-80da-8745-6bd8b51bcb28
  5 804722ef-82b8-0c56-bb18-6c6554a51a57
  6 aa684a66-f0c2-71e3-b6ff-a1edcf83fbcf
  7 560a2ecd-c1c3-1093-9759-c440c7784d7e
  8 9c0b329b-1e04-2c09-a841-d143a54a2e24
  9 03913c4b-283d-731c-a9da-9d1677ec46b2
 10 83a8e66b-89cd-0cbe-a5fa-5447bcbd4049
 11 5aeb3296-29be-22e9-ba74-85386eaa8c8c
 12 5f9868ba-80b0-4e81-999a-280ce5b8bd6b
 13 a308b1e5-b0a3-31a4-a4f0-9f8199bfcdfd
 14 859996d8-e26e-6309-a29e-cb7e27b8a836
 15 4a81ff63-e0fb-4036-a5a9-3e4c26c0fe53
 16 971c9496-5345-046b-864c-06bd7b0d6abf
 17 033d00a2-1545-53a1-b5f4-3e5ddf3d27b7
 18 53a58ec8-a08b-4e0f-ac94-9ab227878399
 19 46cee4fb-eddf-5520-bd58-7c6f533e5bdd
 20 daedaf1e-9818-3b09-97c8-ae856f2e9e47
 21 2ebcc8de-9a34-76cc-9117-da700401f70b
 22 e94de7ec-cefb-86cd-ac4f-5fa4f73f77c3
 23 3bbce9a4-e56c-864b-ba5c-6f3ba4c126d0
 24 b0d9244d-bca2-6254-aaa5-ddf140aaee74
 25 ecf1ce60-970a-5f73-891d-e036f81fb10b
 26 992c1218-2021-8d17-bb81-3a83fe711443
 27 24b0dcd0-6ea0-2a5c-8927-4dfd9fec0a06
 28 59f2b8c7-6a58-72fb-83e1-18be34e555a6
 29 8817465c-a9d9-5339-8829-9e86acc24f39
 30 68120583-ff0f-2e86-972e-68f0e458bf5e
 31 2b89c60d-e0eb-2674-a9b5-c18a9fda1a1a
 32 9fd1140d-e2e9-5a73-9f14-e71951938fd1

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 51480712702436405453788658275225. Exactly this sequence comes out of new Random(775).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 6 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs