A858DE45F56D9BC9 archive

201304141014 1cbq8f

explained decrypted filler

seed 453

Metadata

Post ID
1cbq8f
Title
201304141014 → 2013-04-14 10:14 on A858's clock
Posted (UTC)
2013-04-14 14:14:57
Timezone
UTC−4 · title 10:14 against posted 14:14 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304141014) = 069009f4ac9d17b07a0adffd540f82db (name+title)
GUIDs
32
Filler GUID seed
new Random(453).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
16 · predicted N = 32 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
7 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

31BCFD94B15508B5 DC57ED179C9D5B3C AAE316ADDE58BDA4 0D455E637F61079E C064868F4D716B8C 49ADF4565764BFAD 5BB2FDFDF75E6B57 C19C636DF6FF91DE 4BB92BA79E59B312 BAC17EEBE2FBC5CA 002D035216BDB472 482C9090950578D8 93A2749CBDCB7438 991234C14559A88B 394EB30DCDE01320 B14ADDBDEAA4F14B 9162B070C66C65E6 B1508A4BF545BC17 C19165D9DCA8B3C1 7AF6B2B0EDA2AD13 85E1350E84E1A6F0 59313022F857A420 045EAE7D4EBE784B 92A37FB38CCCF367 1090A0619525222B A82708501E15474B 9AA5263EB3564A13 D5F06D306B57BCCE 00348EDEE49377A1 A5BBBBDF99B0E43A 205F3DCC9886E6E8 2A0131880DE063BF EA24678D9F5E5CB2 28244DB3AE63207C 1D4BD8F246C327AD F2F80AB7DBD4E4CF C70CD3C8B7A38431 FC8347866DD976D2 6F0CBD99A31C2857 1ADE812485CEADD3 101D3B5ABDAE854D 4C2B33F368E9868D 2283CB86B9204479 BBFBCFA77E0B53E4 CA5710418F1EC490 7D650AC88AC3D69D F82BC132378C3D8F AB176BEC4BF7472B 025DE71A8A2AB47D 5B1113634F3A343C 34833A245E68796A 271DA175FA62B0AB 9D07BFFA8331CB68 FC25F5F54C8CCC3D 8FB73E1FB8E86457 6F41AB8BA3A0DD07 BF673ABD9EB6CED7 E477468BB0B3E988 449AA211BAC7AA88 070E0EF921786125 00657871F9C2EE53 B616DF7C0926AC8B 7486D5BEE1D213F2 9D67BD7B4E13E1E3 B52EA0C236571AFB AA7893B46C9CDF8F D676D398F42AC86B 2AB0417709E30EBB 32FFF41866F7C603 27498B59DA44C48A 8A7CEBF05F02EE7F E4C22B3A5AC983C7 79BCA7828BB553C8 6A74798418548F56 49775FDC8B2638EB AE7EE91C15C82FF6 E292870BB45751F0 52517CD53CEAF40F EE890D55419D7E1E 9E90AE47D15B6427 B0C4A49887F2E6A6 359F05DC8C3483DD 9D4A3BEF0765A82B 258D6C6D5E7F31EF 26F33E6414327371 8735A190135BEC32 6F9E52357B62A55C 049185CC6E38AB8A 91668F6B4CF196B0 E665DB28852F0099 0D4C2BDA3EBBC880 6CB6BA3F1E6FA550 6494E220B7111E06 D490F2EA84DF496B F039FC35C567E8A6 91473237A272D716 8A38EC3C01A69C9E D88FBC310E0943A5 E20C08094C01F7FC 04429ED676004211 08C5886DEC233154 00CE7E37E0B6445B E57C513C0EA2F6DF F01339137171D3B5 008FEA336ACDA78E C92BBAA64D590053 1217B12DCB197470 E37A6734BC71F74F EEC2CBFDC7A17D0B B31522E0B6145895 50C9F5651F0195CA E5EAE5ADBE4873A0 B4A9E9FDA1ABF28C E9058B8C988B90B1 7893FADC9D78FA24 279A5513247BB023 2578CBFC7FFEF222 15F165BC87B18FDE 2DFA531FAC812B3A 81EA68C0F04C9E35 3F4BB1BCF95E1C6C E87BD2233FE43CF9 AC8093A8A6C2F540 94EEFE380CFD565C 1800BA741EDF7E8C 88B6F1401EAB9410 C66F04D88D6F195F FED304E9DF9DCE99 720270AACB2BE994
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304141014 (name+title). Key = MD5(password) = 069009f4ac9d17b07a0adffd540f82db, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 f3efd483-716c-3bd2-9aa5-23bc5d517072
  2 522d0852-76ac-6e05-bd0d-7e6aa221ae2d
  3 50aa1ba8-be43-378d-9373-8d675cbb96b1
  4 2f64689f-859d-268c-ab32-4b31f7b90bce
  5 7cea122c-9a01-65ae-b72f-7974b1c791de
  6 197d690a-b069-33ea-a090-d1519fd356ae
  7 4ecef2dc-6242-75aa-8a05-5f584d1f564c
  8 3fabf01c-285c-6092-9fd9-8ebbefd433b9
  9 f6deec30-02ce-0dc9-b91d-863303669b60
 10 92cf162d-839e-2138-a3f0-8198cf8ab2fe
 11 dac28439-ef52-09a6-8f06-36acf127a93c
 12 b1def1ab-d3ed-1004-b760-4b8c7e086c97
 13 ec048da6-7ae4-0dcb-80f5-5d9e261b741f
 14 449fcae2-142b-13d6-a1c2-5b8c696337dd
 15 16fbb6cc-ee14-0c98-a93e-bf20b87e2bee
 16 4ce2ddd5-f7f1-883c-984c-12715e222a7a
 17 167f6059-44fb-24fe-98c2-7300f0bc930d
 18 afc9e7bd-87bb-7fc6-b270-78ccb8ad99c0
 19 88d78e2b-6120-8be8-9eb4-23dab6b77241
 20 983a17a4-fda3-6f05-b201-834690f37fee
 21 130dee67-76d9-0a3b-9f2a-a56e5ac7e8ec
 22 cd449fc0-8015-87ba-bf85-0a8dfb01bf80
 23 17429af0-12ee-4c94-936c-cbd356c35f1a
 24 9a630820-9851-22a2-9921-a043ef6ad1c8
 25 cafda7fd-6f08-0309-b023-74ec8eff029c
 26 af1bce4f-6cf7-7130-aba3-ad3ec0e35d33
 27 5204b182-77dc-3e99-8b58-9c1f7a37fa92
 28 2d873504-d718-365e-8748-8df6bf6fd19e
 29 b73eddec-ea27-62dd-ab30-067947f30570
 30 0c0bc6ca-e9b0-843d-a4db-d34c91f88755
 31 825522f6-3eb8-372e-8dc6-977b58818df6
 32 27466aec-833f-6373-acd3-0230ac813728

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 36326376020101082786084207336836. Exactly this sequence comes out of new Random(453).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 16 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs