A858DE45F56D9BC9 archive

201304251533 1d2hfk

explained decrypted filler

seed 674

Metadata

Post ID
1d2hfk
Title
201304251533 → 2013-04-25 15:33 on A858's clock
Posted (UTC)
2013-04-25 06:34:00
Timezone
UTC+9 · title 15:33 against posted 06:34 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304251533) = 1a7a173ea379f1fea55cc693a409c9d8 (name+title)
GUIDs
32
Filler GUID seed
new Random(674).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
82 · predicted N = 32 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
10 · 12
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

06CC886927FC3876 3536A0C5556DC4E8 8C870650DBF3E28F F9FC2D4D72DC6A52 3820633D10C07077 3DA5611DCF9FC0D4 995B958DAF968C9A A4F31BF2956F1FB0 D8C31ACD363F912A B1448981EC7C1271 2D0A6C8948DE4FE0 1F0B3F072E04DF6C 2432DF6EAE316CBC A276B2D0979CFA1E 3EEC759F88F532D3 E988DFF0A5C51C14 DFCD9FD48C45DD34 68C55EEAF8755952 FC53EC0D5AF92B24 C8A8F262195B2804 3EF5D146DA1F61C9 3497A8A48C4404B2 69053B79738AE4C7 D903157031E9D632 1BCD6A118BDB12DC 3EF28A57806A60EC EF76F96939D3B849 9B8DF89689279621 E63BD35DFF34EF61 BE648996DE041B85 9932996E951A4DD1 89D3E2538874698A 8C5E22A55652EB99 3FA8FAEA8B8B6F8E 1CA4221B9B30B979 BFFF13C6C8CB130F EE8D9F3E61E85265 045D4883618A5437 1C378FBB65ADC3BE E55603ECDBA2A516 AA0DCAFE87999D3B D686AEE37AADE579 AD06EA0E8C148736 9F3175F2940AE910 9F3EE72B6F156AFC 438B78B4967F3C1E C7CA58603A47C1C7 792E7D0FF4986F40 7FB5D349A43BEC50 917237F8BAF110BA 0D957EDD906633BE 59B68C03333EED88 99B93B699880D6CB 7F76CF4DCF436118 F3A02105EEB5306A CF25DB1002A8D1E9 8DA4E4CE20367207 32F6C0EF33E7DA8A 56B6A6ACD77D8C1C 41C627EFB168F66D 976D9927CB0B0342 4FBC383556365B28 A5F0D6924395EDE0 B855A9689801754D F04E89629578486E C8A0CF7E6433CA76 AB2DD959AA83F1AD 2FF1E782C59F9788 72172DA9051FC8B9 0887006182667130 78B5A2664C60C4D5 2A588F98661589BB EC5F215346AA6100 5A2BE63CAAD5597A 96C0063905E42E69 36E3A7DAD6157133 F1CA7598C3F5ABF7 B1CFF6CEFF78DA0B 8DE100FFB1475C68 FBAC9C846328E7F7 8A0CC2E7DDB78733 730E4E34CBCB5005 79A9E0C01CB4D516 566D01235EECD08C FC95817231F7482E 892BCFA1B169D1E2 07C607C0674DBD46 C0EF5EB3268991A3 843B983DF82E307F F99168FA6FA73AEE A6ED437858B6D02F E01903FF0A430449 901BAC175D22BE42 2F9535AEB419F883 776F98DEA1EA677C 95E990DF0E173E66 B1E7ABDA69D69E53 ACD6EC93117269D0 67966620C0182D8F 5B33622C46D1D2E3 819F5EF9AE66F926 A0A028BE95F70E3E 81EC82B2793A7772 05FEA7F819F08500 7DAD95D655CAE320 0AAE365B7FCCF5B4 55456C9082B11B88 586352443B22317D B0A9B01A9F67E0D3 5712A644FAA1C1CB 579795D7B98FD336 57DD9000D9AB0E4F ABB59AC2A2BA8857 9B4DB4388C6C98B3 B6594D81CF449DD9 2FA99F71B57475E6 A44F01163926D023 DC9BF0F45B4BFA59 4097F4F89DA74992 02E2CA7799DFD83A B34579FB48B510BD 607F6B127C5E9E95 927123287854F395 61F376E439F99C3E EFD97DF2BA140633 EF5521CF9048DD17 A267F4653E2086B3 51DDC77EC8205CCC A846AD0E4CF07F87
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304251533 (name+title). Key = MD5(password) = 1a7a173ea379f1fea55cc693a409c9d8, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 4d3f3257-98d0-731c-9c1e-f1fc66548f8e
  2 1baa229f-b3d1-5fe6-8b97-41fc4b6bc4f0
  3 d3693273-9938-7541-8de3-8471a9feccb4
  4 b629ecc0-259c-31a5-85a6-d17d2a4ad12f
  5 eab39a0b-5b42-4afb-b980-f4654d20cc6e
  6 6bdc35fe-fe7e-5037-90ce-6c8f660e0e62
  7 4c8a73b4-eb1a-89e5-8b0b-fde2496814c9
  8 fcdf8c25-98d0-51b7-b055-35f60bdaeda7
  9 ec3ece65-98ee-3a0c-95aa-1d0e91e28117
 10 cf2b4b38-a7b4-7954-844b-5083b07b58c2
 11 54f42a7f-ae17-77c8-85cb-c439e2e45d88
 12 9be39be5-f56b-66e8-96fe-95c381bb8994
 13 aa47c2d6-8a6b-803e-bbf9-3b9198b3e549
 14 1e3ca979-02d6-1dd5-902c-a709a859b995
 15 0de49d27-7239-688c-803b-3fb2890d4ab2
 16 0a54319e-5e35-86ca-8352-880eec97d7e1
 17 aa623a81-147b-1db8-ac6f-c7b7d0903aab
 18 70a7da0b-184e-71bd-a25a-640581e9a39f
 19 6a9d602d-02cb-8eb9-a6cd-b606bce26ab4
 20 8b752a8a-0bad-2cf4-a5b1-1af253def3db
 21 3391f70d-1632-39cb-b98c-9292b873cf60
 22 40ceec27-fb64-19c9-9092-4f4198d6fda3
 23 604adf3a-3cab-89b7-ba11-e2091a37ade8
 24 7eebfaa3-1fb7-402a-a178-127dbef3a181
 25 0ee4a039-f552-6a1f-b930-8ee04c815913
 26 873f1a7d-93ca-0e9f-8174-91e2ef38241a
 27 f574efa0-1bc1-3559-9b2b-07677ab500a1
 28 5b2fb7f5-3bde-29c1-84d5-04f5d32ac959
 29 b064ff42-72cd-6aea-a177-96ad67633f67
 30 970b4216-8f9c-8455-8b4b-c0b4308dc3bb
 31 7971afa2-a580-0925-912f-e87258e33362
 32 26520060-3cd0-8d43-904f-cf316f5bd542

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 75734585377681681782318460326808. Exactly this sequence comes out of new Random(674).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 82 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs