A858DE45F56D9BC9 archive

201304221617 1cvvym

explained decrypted filler

seed 58

Metadata

Post ID
1cvvym
Title
201304221617 → 2013-04-22 16:17 on A858's clock
Posted (UTC)
2013-04-22 20:17:46
Timezone
UTC−4 · title 16:17 against posted 20:17 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304221617) = 3b62b6524fcfd92baa05fe7384c19347 (name+title)
GUIDs
32
Filler GUID seed
new Random(58).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
67 · predicted N = 32 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

8D0DB9A0A155A6A4 3B6E2CA89D1A2AF4 0D682AC991C93F4B F3C41BCAD4F9EF86 1F91F5AACA6C9D35 F849F24EA164E863 B936B0E3BDE6A7DC 23C56A7E250264CE AA997AC9D0E22E85 E090445EECA719F9 F391281431B784AE EA60B5B2F0C571A3 82C1194141807F86 D9B7DFEF054EC521 8C4BA011F82A8949 EB041DE6434E2778 ADF16A70F6BC1EB6 960678A90383E86C 0B044ACD6A4EF307 F3AF2285C3E4A5ED B766858F5D256DFF 18B287153F6D25AF 7410B467AA57FA91 AE202D3A1755121D 3EBF4EEDCC3B5EB9 6BD6953E327CD994 730CDD6A7C6889B1 98786E7A30461819 95146A0312B0CE03 70D641199F8B3965 4FE96C01B497231E 50D624B44BECEC73 E8098DFB8DC0EBCC 09CCDF442F9186B8 86FC1841F2E4FA0E 3E221C15A2610272 E10BC7249544BD01 16EA5BC3A91F0E40 6256229AC62FAE52 440C0D0D6D0DECA7 687E71A2EFEBF2FE 4AB57BEF0571CC30 F258D94ADBB1D55F C6AA9956416FA682 EF5B5E4A0C72DA63 4D541FBF6931B7BB CF0B9FC9D238EDBC 5AAA84B9EFC56915 46C102F9E8F8D4C8 8C3C89A46B56E0CA 2B5309B5881A7595 0667F81D65EC9165 58CA87A7005DFC54 6E2F78E6CB0D4209 AF32AC92AD581480 8B55B4FF17CC6CCA CA9EC7A7AA411524 2EBAC8092BD2ED02 B34343C39B4DA81F 20CEEC7FE4A8072A D9CACABD5F67EC32 DA1EAD9C0B9BA2E5 3A6549A7F066B7B9 B8323AF65BA79CD5 B7758420AD8F05FD 82EC62EA9B33348D 0C9254C49DF0F815 BAD4AB71735A49C4 48160A971FE83FC7 71254AC55424ACD4 1DC447B1D1F8C6CD 955FB20B4AA85509 1DE0E3497B763281 F9CE20A99C700DBA F86622E47EBB936F 756977C2E2D2051F BABDFFFD774DA644 04BB4F15BE97FCE7 2A75E4E6B3611F3C 2E1234BFAD897E0A 8B1C04E63AEBB6FB AE6793D2AEB365E0 0AED25E0EE163042 51DE49D79B5FC7C2 B6EBC60E0424738B 72558FCBA55BFC33 BECBE45C3F880F56 D032D8A7167168F8 015FB0961024FCC0 C4E4E1F0CE4DD271 7233B0AECAB5D600 F5E0101CACCDA860 D7AA5CC8B67F7E82 74DC6914192EA057 911C2E1CBD71443C C953FF8145C324B3 2250B1ADBB0585F6 DB3A4BDC3E3D2C17 C5CBB5FC2B676238 3B82FAF108DE854D 5FE0F904020DB914 9E5B4B16FBF09FCC 329B50DED92F2F2C 9648B30665EF6AFF 0E820AD642888AD1 13670513E96ACB47 76B3769CEAC454A1 60CB7ECEEAC0842D BFE3862C9CD87881 7AE3683E9FB965C1 7E8D5C8ABD95BF78 8CE4B5CEA0C9A0EF ABFE278619FBDA41 40619E6442F59DF9 04884827621D3EFD 7069C6244C32F863 DF21997F2490D4F0 636DB6A9D531B643 9C55FCB31FE05682 12F64BB1149DFC00 A1D85BD74FB6A6CF 87A4B6E83E6B09F5 B0BDEED800FCB0BC C09985A7F841C6E3 B28A475FCA3A9A32 CD768E28A0340344 9F925EBFF77E8E18 DE073D6730A2AE25 CA3D15175388A9DC
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304221617 (name+title). Key = MD5(password) = 3b62b6524fcfd92baa05fe7384c19347, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 66ff5c18-b10b-0be2-bb21-dad364af7156
  2 0d47c7f3-0524-7c8c-9427-4668ac63611b
  3 e013f97f-f73d-2d61-929c-a894847df2c7
  4 35be7b1d-c4d0-8e43-bdbc-99fb71c1a193
  5 eed88a80-d564-30a3-9f9a-3ee5ab562667
  6 5320bafe-4cca-2ba8-90d3-5cdc9d33dbe1
  7 6512f34c-de04-882c-9b93-bc3fcd071023
  8 0f30f688-aea0-4d20-8c3d-42cf330d2205
  9 be52dd09-a7ad-178c-966d-0bdaaf83c349
 10 444e9cd2-ed77-5079-a45b-e21345321b50
 11 7d02b400-4db6-0e88-8e0d-c59e09b628b8
 12 d069f225-b809-687c-9b98-a13f62833e73
 13 0df28e60-ddd6-48ff-8181-2fc4fbc5b289
 14 11e1416f-06af-55a5-bb87-e88ac7e53868
 15 e073306f-0889-506e-a498-643f240fc3a4
 16 8df78420-6e75-2fd4-b8f9-d4e4e2cbeccb
 17 ec88cd96-05da-2fa9-8304-5cb0dd1e3060
 18 d27ca6ff-dfa7-800a-b5f5-62818796ab38
 19 4575aa10-5513-289d-8725-89b6f99f26ce
 20 38fade56-86e5-672f-8a3a-13f20b0540e7
 21 e58a0326-6234-40e8-9bc1-c259a72b564c
 22 10771257-a703-0c24-b444-408cf8a1837b
 23 7efcc8ef-8619-7bf7-9d8e-324ec8c228c2
 24 7e402e15-3fd6-2f3f-9a69-b26deb594eca
 25 1b1f703b-7f04-37f4-8172-6b214b31a02d
 26 2733cd12-9319-723b-bace-f922a7e9fba9
 27 b9bbaaf6-7122-7bbd-8762-ef9e99a85863
 28 34de1b24-b57a-56ee-b407-a14eea11741d
 29 18eab566-a51c-57a1-a2b4-eeffb14d5560
 30 1c306433-ebb4-775c-b724-d96dc017bf90
 31 a9d58286-14e1-5ca4-ab6b-0495cb480e28
 32 7078d61b-19f3-6c3a-b319-e9210fda4eb6

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 07283284150645522826407237755756. Exactly this sequence comes out of new Random(58).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 67 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs