A858DE45F56D9BC9 archive

201305020220 1dhvbq

explained decrypted filler

seed 724

Metadata

Post ID
1dhvbq
Title
201305020220 → 2013-05-02 02:20 on A858's clock
Posted (UTC)
2013-05-01 18:20:35
Timezone
UTC+8 · title 02:20 against posted 18:20 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
32
Filler GUID seed
new Random(724).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
126 · predicted N = 32 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

A42AA23ED4E6C0EE C78666CF55F84E48 4B3ACE1BE34C7632 E77D76A2D8D4511E 5BF8C13E8A3BC20D B429965C31AE95F7 B57C8E593D0B0339 99DA02B90AE2CBF2 6D7469AB5F43A067 634911C82E7E3914 D67BAAB32DD34FAB DF9AA4E96381BB39 7242E6C21F9B60E8 69208A1C1346AC0F E9AF20FAC379A90C EE83C4D3C5FA413D 08689D082554B41A 05B1AF28554F93DB 327056E00E59BC2E 7BDFFF286454B151 6A540AE44500E9A3 F7D7333DB342EFEC 2B68FF70D8B92705 706F8376CE272B91 01CA3691240DA26D DB52BEA6F6179CA3 99E8A2C702994175 C724F09B5AE8764B 16610CFDB828D44F AC0C3243649A2B94 F7F1E1C88A407B82 14A31F96AB439B1A 20967A42426B3657 CA82C2DAC46363B5 1EAA52171F23F969 5A0168C60866E6E6 1BE68AC6B12876D7 46BD318E9E9C7B43 A4F3C2A940D846A7 15229CABE72F965E 4DFAE553C144006D 536CF6BB75FAC8F4 1CD46B235BD7FA39 61A715A30A12C38F 2C9CFE38DD40F2A3 189F8759DC0C02B7 CA7E28B61247E2CA A9624D542FC0C027 70386886AACE75DB 790C35CAE66CAD0E D8F58BD1965A8F0A 31CE1E71EA3E4C0C E2A4AFFF3F643598 8190FFFE8875B770 D492BAB808F2BFAB D1862B80C8F04F60 B06C8DF80713CB0B DEAFAEF4995B8FBF 78BD1823C8AE40E2 20C01CE92528BD67 695E96F4C58CCE57 82205D5E19A2ACBF DC864F9FE8B15F97 DC98886ABD89E830 25702C91C0E48838 7921EF01A2992C1B BFB6A8CCB3CC70B1 C0EB8E4BE723A8E7 CA733640287E867D 99DC91CF9339F6CC 8D56991923002BEE F7BFD52D1847AADA 5E5865A29B1698D5 50B69A65576F7272 FFF5CE8DD2951A66 EAD3A6E33EF25F31 4DA82894D9EEF606 FBF462CC4E7A8826 86DC23C643CD964F 7CCA113D7CF15523 889C5875541D869F 62232323DA87C871 3C2FA71A31939561 283B48E5A41B5DD1 BB671EEAD1361FC2 A0E881C152E9C055 6DC546B9B1503FE2 055B3B60CCDFEE1A B1CEA643012177EB A9F18E12542C0315 201C1393478DCF8C F32A7F351C44DC5C 2FAFD2E61468F4F3 2091210BA519261E 92D847F312385ACB DA64BCEE763A0E2C B30648B08F8D191C 3BF9161B83EFCD86 854B5545B1E2317F 8AEEDA882B9D2227 79A3C2DC0118742B D343E0B5A2CEE6F3 2813EEF56CCC5030 A163BDD2B6046163 3BB9C25F169D0DF1 5234CBD5A6D87FB0 DACB51D241F664C7 9E3630953D3AA282 078CE1B458DC1B0C B1E3B0B7EBA8C84E 9BD350103F45C7FB 8F51BA57269A49B7 F8EFA9DD5C698D85 7F7CEE6C5C1E1AD7 53AE9A8988B2564C C041B15F635AFC96 24944E62643AFE32 A48B7743BE68A8A8 E5F6B52D3F579A63 79282FCB4D896EBD 80CFA870B1E946E3 2EA07F16B2E56243 12BEAF35AD45BE11 D82B29482FCC54FD E217AAF5D6538C62 F08FCEA34576E3EC 52DD52FF3A9BC916 79565E3F8EDD7B0C 5DACFFBA8FF64DBD
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b36ad44d-8dff-8aed-ac71-289030458292
  2 cfb93e5a-c909-2647-b41f-c5011e9f772a
  3 33a6a9b3-5434-753d-a988-def5f82fb07a
  4 d86eb277-af9f-08d9-92f5-78f2f502fad2
  5 c1eccb63-348a-0dfa-b155-72917eb0693d
  6 a5fc64ca-27c8-268d-8bdb-b1dc44fe3090
  7 f834e975-886f-2f5c-b444-23f46ee89465
  8 cfe55496-b79a-527a-ad0d-f36ac1e0151c
  9 5dd7f3d5-a0f3-4316-a231-f059d0ec1bc6
 10 dd4315fa-c7ff-2f0c-b873-25945a9b305a
 11 a02df401-822f-6b64-9ca0-f4ba537561db
 12 231e33d8-595c-6c30-9348-011ded4f442e
 13 e8419a1b-41ad-3d2a-b2af-14fe52210a5d
 14 f3d021b1-8faf-135e-a394-83b4690efc68
 15 a1d7fb8f-f41c-6563-b28c-e3572370bb38
 16 adb9daa5-a057-12b9-9265-6e77d184c304
 17 f4fbdf68-d2d9-17c0-ab85-d7e796c28f9b
 18 55f8a82c-e7b3-719e-918f-345cf43980b5
 19 4b4e4afa-2dc4-2c13-8056-5b9484109061
 20 6e01b597-2d07-5138-a988-20f34abf139a
 21 06b8447c-3da4-0dbd-b40a-38fff73e116d
 22 afa9b74d-9f75-43aa-a469-aa4126c9352f
 23 e6457b88-51c2-3c8c-934a-21e1f2f94e4b
 24 187dc53d-b05f-8f3d-92f3-a2522fa41077
 25 510bfa55-4cf7-567a-81aa-d87c9e94cc6a
 26 c6453a23-076b-1c8a-acec-33f14e3e9ba2
 27 3d8d1f54-84a3-3364-a55c-6847ca5378a3
 28 082ebab8-296b-29b8-a9f4-b1340eb5d2e7
 29 dad52e79-ccf4-4bd6-bf72-5cb6cc234004
 30 ec095c8f-58f8-1126-b703-e7598037a9dc
 31 5b31c41e-0097-4464-9724-d801b86225f9
 32 2e6b5916-4e28-16a6-898c-665cf7b3f6b9

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 82700225426631611725043851324141. Exactly this sequence comes out of new Random(724).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 126 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs