A858DE45F56D9BC9 archive

201304130703 1c9id4

explained decrypted filler

seed 143

Metadata

Post ID
1c9id4
Title
201304130703 → 2013-04-13 07:03 on A858's clock
Posted (UTC)
2013-04-13 11:03:58
Timezone
UTC−4 · title 07:03 against posted 11:03 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304130703) = 2d8f1d8764814eca41fb82bb25fffb5b (name+title)
GUIDs
32
Filler GUID seed
new Random(143).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
9 · predicted N = 32 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

C13CF82EE4D009FA 1E9FF3B517354340 47DAC53FA89BA8F6 42A7B75C675D24BE 3287F004AFD6B6AB 456C03F73164AB15 F519305A111CE451 B7E7A7525678DAC5 51B4EE517C0585BF B05A7DC088EE1A53 AB940F7A60DD170F 7212982F8B2119CE C938271AE09DF710 19362A835BDC94A6 3A8BF608C8BD1541 45E6B4EFE410922B DDDF8BFCACA89E84 63EAD57850D9EE36 C61316A6C2EAFD09 C32B7C45BA53306D 0D31E2751E78AC05 5E97EEFDF8145C6B 84DD9759EDD17878 FF57D9563A33D4B7 731E4F45A3E50043 248445721E893DC5 D74EBE1DA190C3D8 CBB7958D70F6B119 A25C9E785D755ACC D44FA1BA6120FCDA 1CB148FD74EBF513 E245529449CF4E45 14C85CBD567B9463 97843FACA407C85C AD761128C3192B14 7215217A73F1998F 7307636701D9786D 0B713EA3E49B8090 44A9EBEE4A80A5B0 6382934B3B84B25B 9C1868979BCAAB44 BB367434847BCED6 5EAF85E3D6F19BF0 D0C1869A90A41878 57232A92FC681057 D1AC85FBA53A2849 D8A54EC91FE4B8C8 9CB61814BB0FA7C6 3AB6D9259221188C 5B29A1B0472F8C7E E1DC1F8E66580C9A E8D436557A1D61D6 A1AF5838857E823F 90FF103A42401966 F8C1093AAC60695E BD2504BF0B5A199D D5EEE3221726A4D5 DD9B5AF53E1BE4D8 D56B35C7866EDF59 E79BC79BA4833CBC AEAF7A02A23EFBDE A6D3BF0FAC42BF3E F2DD5CA26BD52C9D 27CE88F4D1450622 B5AF7EF44BC79087 E406A7B908042D5F DAE4408BC0AA10D3 47788790C909F189 BD9FEB6311D565A1 62C5D2FF15D09E40 CC5655E95863AD34 D6311EC11CDE4E15 21F77FDB1DC7AAE6 80E740FA992E43F8 508D363DBA541287 5B98C282A5F40BD9 7613FF8A453F02C2 CD5B9485AADB4D3F 3CCBB807A7080578 9E89BD45ECD5EA1C 1B4BDF726BEBD989 091FD8A3D79676B8 48089C168F03EA10 F6B7AEE2A9E8A608 F6391F4270BBA7DA 49711ABFC0F6FDC1 B76FBACB076B2267 3FF28806B471E9CD 433A106033C473CD 55EFFB284CF54BCC 0EBD7F908439E91D E88383577D4D785B 9891E06687E340BD 2628698977E25AEA 6A0C05C5A4133F2D 7773728DBAE4BCEA CFE7EACD482CDE48 D1699044EFC81720 E8FF465EBDAF5BE0 DC086ED66BB8ECD3 E09B3DA9677110C4 78FB9904B791471A 2B1606E7F3B7571F C33BB4C7F2DE7AEB FFA3EA6D3ED8FA45 A89E1F8E2D6C5E95 399460124401B910 916804557897A0A2 1FC0C71F9DE9D27D B868003303145CFB 902A7FE6B85B49E1 04B6843D1875665C F9223CF4D1AA72D5 FFF6667C8C488223 DAD4A634B04BF8DF 189DB97BF455AF5D 98CB43496B949DF4 BF151BB128D60C0F BA2F098485EC875D 6A982C1163740E56 296B232246855848 73D74026DAD69F88 0D75C034DD411DCA 8D37972C41030047 78C5DD5EE13F2047 17CE50CB3982BD60 EDB209972F0EE154 0E72B7FA299F6ABB CECCC2CFCA41742A
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304130703 (name+title). Key = MD5(password) = 2d8f1d8764814eca41fb82bb25fffb5b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 aad78442-0e12-388b-9b09-4123ebd94a77
  2 8f6f5248-823e-684f-a7c8-21b54e2e3b2f
  3 39a5243e-3dcd-698f-aaaf-cb928e390df0
  4 dec9d2d0-cc5e-0053-8db6-9559bf2d1c3a
  5 c819b4aa-059a-686e-856f-12895c5be4fd
  6 f7548345-89d6-41ce-874f-1fda86902878
  7 23a8552f-61ec-8384-af9a-b724aa2b1829
  8 6c066123-1a20-16a5-b1ad-ab9e9ea9eae7
  9 99fb2a97-c105-658d-bad8-d4194b57d47f
 10 e80218d8-7856-0483-9854-a1c434dc8e8a
 11 2ace63e1-3192-587b-8dc7-a4f75a3c846b
 12 6c58b3d9-719a-010f-83d2-c2a0aba2e32c
 13 a84a99b5-0d6f-80cc-9197-47ed0c5d2d41
 14 bd0106e6-d67b-7ec5-85a8-d3f034890acf
 15 ad144cc0-c747-066b-a3b1-3664f5f374f3
 16 cc3052ce-195e-36f9-806c-ccddb185b564
 17 794547d1-5f7b-8019-bfc3-23c80f9c0d99
 18 321a9a69-b99a-5228-b8bd-2fc0a20bbc72
 19 4c778f59-cb08-46c5-8998-1ca1e32646ba
 20 f9603f49-e2fc-6a31-b893-18f6dbad5d4a
 21 84e85170-919b-7699-ab3f-e089f7b26438
 22 509ce9ff-1df4-89f7-8ad8-993ff5fea628
 23 9519b875-fd4b-14b4-8334-f2bb89b1da3d
 24 b5e05e8a-1319-886e-8080-4676365a6961
 25 f7dc38d6-e884-6e0a-b8e1-42540c59e3d5
 26 8dd1911a-c081-485a-8ebe-9542df8aa0ba
 27 c18acfe5-7c4e-7fda-b330-b9454cc6cfc0
 28 3bc43f92-8dff-2321-b2ad-06050c567d5c
 29 2fb21921-0528-06a6-a59a-b890e3ddc5ee
 30 b293f130-2187-2581-ba9e-812ff6654974
 31 9a282d2e-1aa0-85e9-8690-115731d60554
 32 9e34cda0-0eb6-1415-a19e-2655f7548f35

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 36606481605087038546781864720281. Exactly this sequence comes out of new Random(143).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 9 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs