A858DE45F56D9BC9 archive

201304042029 1bnicb

explained decrypted filler

seed 264

Metadata

Post ID
1bnicb
Title
201304042029 → 2013-04-04 20:29 on A858's clock
Posted (UTC)
2013-04-04 10:29:58
Timezone
UTC+10 · title 20:29 against posted 10:29 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304042029) = ea3e6bdda7043b5e462d9e332c21d0e7 (name+title)
GUIDs
32
Filler GUID seed
new Random(264).Next(9) ✓ verified
Run
Run 44 (seed 1,087,967,875) (seed)
Draw
49 · predicted N = 32 ✓
Machine boot
2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

DD77830CD1CFCB6C 2C0BA6600FFA64EE A06D25E73B1C7141 69061D0B8F59650F 8EEFACD390C0FBAC 4240E87F3D3A8CCE 901628DBD4A63B95 4A3492C73BC7FCFB C27D0C2BA2C17EA8 D7DCDF6329733BD7 22DD12ECA5D82553 470B2610B18E42BC EA42F33812D7894C BCEF3EFC37563D6E D41BCAC4B0746F94 CCDB9B23658C892E 619A431FD3E95468 2A620CE765B08CB8 D206905ED163D48A 91D5F7D1FBCAFC0D DC264EE13A9CDC21 9747A4D94B888DC6 BEFE042BC8B63C17 F79A35BF2503E375 598F728710C1B4A5 C62D9B2C6458D932 0E91204DBD945A1A 4C92DC12FA04326A A734576C4BBCB107 872A77C711DEAF8C 9D830DAAF26DA0C9 A6DB0B8C6C4E1901 C70989A7860A5115 4482163557BE525B D5549C006A999B7F 69D6E15963DA81CF 34540A45B32F97A2 8F390FC677588A12 513F8675124F4911 12F6B87F5C1CB272 7D66928926A4AB72 B887B97812638AA0 1F09D570C6908B68 B1C34824A05606D4 84B261A645648819 F90BFEA80AB01F93 827E79AC55D319E8 588EBCCFD3AEC935 97AC611124085EC1 AD4E22E08F80D78B 2E75692B9DA81BC1 E11ADE96BECB1F97 BE22D4BC438599C2 EFB89D142001B5D8 0BCBD49275F8E50E 2AD1C3584D1ABABE 31481C738F38D03D 56BBB5A430C39328 F3552B31DF84D92A B76802F24D148A71 BB13A3BCC575770E 247556E5FF7E59C5 94089CD5A3483562 2BD7EAFEA7829FA4 A5DBEBC004F87B80 C5E6D33E5AD29B6B AE9F27EB6CBFBC0D 75BD8EAA5C9E5000 23E3DEBAF89A7969 3CC3A15722C0463A 148EA387F146CC69 54B535A80B1F6A67 5FDF143FA5463EE1 08353649971DAADB 6C1C229CD4909C99 C90E43E3C3ACC94B 484456CA0D276049 331B346880B7951F 42823F4324176D81 013AF688B3C398AD 15C1054E6A3E846C 1DFD451ADABD5090 E875C6FBD5AA3EF8 16412DA0555C2353 8F7784A929AF5FBD A12BED6899224435 CF7E136E9DAF919C 47B79D193BBF785F 1C4E6E0008027045 2F00B7700434D5BB 952CF07C1E93BB5D C8D7222862F414D6 85B67093C064BF8C 6BD52187DFFD4707 203D382CEF439D30 132B32A03635CE55 BC3CA2BDA9DA3C13 40A8BD76DB68EF70 F84CA6ABE51D490F 13AB318FEFFBFB8E 8223BBC1F86B9396 1856756CD26A1BE3 561E5FB6AC1A4C71 DF95162F77EC356E 89E815A96A69F2DB 28E6F226756FB85E B46254EE671215A8 A3561F60A9F0A2DC 9C7E49657F8C6512 3B8CB1F8FC72DEA4 01AFB875243FD243 DEB088A6CC507E8B 1586414E98338627 9DEF117A65689630 74DFC3EE474B847F 6A03DE78C0D4541E 2CF2E2616F076298 21475077FB5A8450 72523ADA6C9376AA 76DB75B52C44B805 77D2ACEBC24A7685 0A8B5DE3C7002923 7530DD366EE2909A 45798AC6B99F9361 F0520CB4C82FEA60 648920DA69149615 0CB395AF29044BCB 4C7A235D4FADA3DF B68851BBDAE9C67A
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304042029 (name+title). Key = MD5(password) = ea3e6bdda7043b5e462d9e332c21d0e7, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 733682a6-d700-5942-98d0-ab2f41254593
  2 f46d01dd-9725-2bee-80c8-af003bf33b34
  3 1b7ff4b2-ecfe-2677-a754-8a5c536842ec
  4 91a7f957-21b0-8e9c-bc27-349ec0a1a8b0
  5 7c11f4c8-0b8b-39f9-b48d-6d8c7add92d6
  6 9845c211-e91d-287e-8ba4-542a0eb65a21
  7 5a7f9f42-83f0-176b-98fd-aa98c7685488
  8 2e168d6e-c25a-725d-bed7-8a7d9877a337
  9 adb03d1b-4058-551d-bc43-03103e6aae78
 10 eecbbb3f-5f83-5719-a8d6-c5f88cfd80c1
 11 29daf547-8c4a-7cf7-a66d-fe6d782a4271
 12 5865d6cc-c82b-50a6-a068-ad25fc63d7cd
 13 d37af611-9c35-1ab9-9c16-ac25c83ab7f2
 14 b46d7382-e42b-75fc-b764-be8080e46f5d
 15 a0341c27-99ae-642f-baf9-2cdad8071c6f
 16 24c286b2-13ff-8926-90d3-8af7a0bb96a7
 17 6a7a7c6e-d21d-77c1-93e4-d358fb1731a3
 18 0af4b30a-c173-63c5-bd79-6984dbd6cb5a
 19 9180bc62-d197-791d-8cd4-85d41edc5ef2
 20 e1fb2058-9a13-4abc-ace0-b439ff72f95e
 21 e8a3311c-45bb-8847-8795-9aa62b67de18
 22 3cb8fc7e-84fa-5ea4-82c2-b52044b32d00
 23 243d2c2d-9120-5f4a-a573-981a3c2110b4
 24 b0e82c40-921d-2f32-a310-eb8c26a3077d
 25 03127b85-5c50-536d-a412-b2ab5bbbd8ad
 26 7a3e28ca-90fc-2ec9-9754-fd422b347c49
 27 cac105a3-8ecf-8a4b-9f54-09c4af7acd10
 28 b107521f-5100-2224-9fdf-3904b7a12b5b
 29 cb422bec-2140-45d4-9661-d3e1e7382545
 30 c86c4346-7361-6ece-ac4b-983772b0ef02
 31 84cd3292-3907-55a0-a3a0-5c95e001dbe2
 32 be7a8f53-a4b9-8e3f-96e6-5e7e3631229a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 52283217557517687674855252824658. Exactly this sequence comes out of new Random(264).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 49 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs