A858DE45F56D9BC9 archive

201305020405 1di3wg

explained decrypted filler

seed 629

Metadata

Post ID
1di3wg
Title
201305020405 → 2013-05-02 04:05 on A858's clock
Posted (UTC)
2013-05-01 20:05:35
Timezone
UTC+8 · title 04:05 against posted 20:05 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
32
Filler GUID seed
new Random(629).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
127 · predicted N = 32 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
11 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

CE2960CD402C4184 15D84D03A5964A3F 500805BC2B21C5FB 20A7D847F4065E40 AB38198290912F4A DF6881FFB429585E 9E96F23947B220EA 6F92AF77B0CC9368 0613FEB17F738BE3 3F8BF3065A6687CB EBDF04FB9FD7EBB8 5D7BA13FB1BBF0D6 BB778616810841B0 0C928DBE90C17327 588DEF171A028430 8874F14053918CFE AF138323BCBBCA10 0803232BCD638684 3B83D35EF8F6C28C E8288CF0BE143A7E 59C1DEB4F4C8FD5F D3248912AA452003 7B30B2244BCDD362 F69BD4A742AF618C 90BD7983D5177EC6 807CB4C92002810D 1DCB498AF585D712 86C6E649FB915B4E F49E1CA7984D69FF A1DD8521FAFE0C4B BC24B1F4AABA29EE 3517DFDC5B112FDD C81D2B7A42E6939B 10D24EF2428F97E4 4724E57FF23E6BEE 0B12F32C5B1A3F8F E54566A33E8455ED 241F22913440FB6B 799FB253364ABC76 4946BB196B45622E EA43B0844B729F21 0B46F7AB8336A2FF E464C2D0B7AD2870 2BA04707403C5DDC 4463869EEF98C006 46EF4A9BBF5EA630 7871F87646C08DC6 C21B7DA062E975EE B0093CB84B0A2CF1 3C4B7985BFF87C51 34C3F12B4B9C6350 C50562E75A477F6A B60A4DE171C24C32 867645B1E01EC4F1 0CC42BFC447E2457 C5681BAB39FFB56F 2635A501ABBA788F 29C238F31EEC12EA 790E84D7B6DF93B2 FC739C136DCF390C 7227A5C55C4DF6ED 4C2FA26871B47C37 B9FD9BC89B676D3E 2B586FBCA9B63910 CB5CAAE3289408E1 292A0D5EC3D257EA 98D73C792B2E5239 92C1F56531C5C8FE EC6D5B05365AE07E 7A27181AF70CC175 077747C779231BC6 17E262732C201712 2D29DE1B3B26402C DA5FCD28274DB7AF 272594D4D54A99C6 BAF48968B27FC05F BC1DC07CBC17B77D 668596AB03E54D9C E903B954AD47741E 50C993527C473933 2AEAE2A7EE5D81DB DB12E54EC5DE6C75 D161F4FB5598BED0 F57E10BB388D0608 B89128266F316483 A833F22FE2B311FD 443B9F29FFA6CDE3 C94F4048E7DD6C3E E75171DA69B54B9D 13230F3A181A2B3B B10E130CBDD071EB 25CC37A2DE714CBA 5E025C6D8B636D77 448D9197C0C0818B 6CFFC8EBA6284A79 713A0C4023BE5F08 05AACCE19B132A03 71E71D7B4B4AAD70 E7EB359A5A178422 1D32D9A77EEE1B16 DDDCDFEBC081AF40 40044D4102328022 67557D41911C4489 08CA277D0B901350 A64E34A67B898BEF 316852EF20DC71D9 AA7F859A752FB68C 959C0CB11E8A288D AC28DC1CB94E8B5F 93F6650B23D68798 C3BDD9DB44C144C2 2951E5603BE62EFE 43FB51FAB98F9FDA 6C8C6195F57E3D00 250CECC8F10FC914 5DB80AEF6E9B9F33 A55459C96CD106F2 709DE5635025CE07 7B29153F219999F5 3DBE202B7C93CA73 899533693D5DC368 07AB145C8A2BF8C0 6ECFB0551A0AD23D 03BA2204D8A0647E 81ADB09D7FFC030C 0B9F5DB44E051B8E 769D79C1496AD543 143441F6F5C396D1 5DACFFBA8FF64DBD
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 35571834-864b-26ff-9e9e-6d80d6e6f197
  2 6f1896a7-9edf-3cda-8237-cce12226fa68
  3 be3d85f1-3fd7-3dfa-a37b-5f5b5ef7aeec
  4 c6e1cfdf-6c56-73c1-983b-109f8a48acc4
  5 6981ad03-b101-1b92-84d5-0c5a14421529
  6 bfdec097-c7a2-2acc-a5d7-5dc8ae06d241
  7 e5c5e67e-137c-6690-a85c-aab3335fdacc
  8 adc23002-4fb9-0c8b-afcf-6b6d56cb24c5
  9 41ede308-6dd7-788b-befd-2b2088656ea0
 10 dc2c9672-eed8-1d5f-b345-40cb8629d52f
 11 6cc47e6b-16bd-6bd7-8f17-9b9d7365863e
 12 8abf7563-4618-4e2e-92c1-90b7f19bf192
 13 ab05c166-bb65-0f61-96ea-5efadcac7221
 14 523e8573-4898-657a-80f4-3694e01e10c3
 15 998ac89a-340c-2b5a-bf02-a91a2f178652
 16 5a5bf6b5-a183-7d4f-9377-34e94d30016a
 17 50f69955-19c4-273b-a750-573b08ab1485
 18 0ad93ce5-f45b-894a-ace6-1e1caf3c8ffa
 19 05995db9-31ee-6355-a286-128caa68032f
 20 524d2972-a3c3-765e-b70c-6b453165e485
 21 e3b9e6c9-73fb-38e9-a81d-850f7e845fda
 22 482debbf-8705-192a-9566-fcac74f71513
 23 41c78150-6973-204a-831e-2ba319a6c704
 24 6265a385-e0c1-684a-ac40-ce932f1389fa
 25 ac4039e2-6d2f-34c9-9b07-4450b026fc33
 26 975f9a8f-349a-04b5-b0e4-62da07eb61fc
 27 9d87b0b0-868d-69e6-a092-b78bfb65f2c8
 28 03ae6b15-8daa-3e5a-a483-ba889cb57664
 29 46e7aa13-39e8-2324-bcbf-ea0fecbbb8ac
 30 44fa521e-1689-52cd-bfd9-126eb86bd379
 31 1f99fb13-96d7-3c3f-9dac-47e3b28772b2
 32 7eb88895-94b1-1421-8913-f75c1dbb452a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 23371260716406272867312630632531. Exactly this sequence comes out of new Random(629).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 127 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs