A858DE45F56D9BC9 archive

201305261607 1f2nql

explained decrypted filler

seed 901

Metadata

Post ID
1f2nql
Title
201305261607 → 2013-05-26 16:07 on A858's clock
Posted (UTC)
2013-05-26 08:07:48
Timezone
UTC+8 · title 16:07 against posted 08:07 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201305261607) = 3028fd6ece43c25d59b994fd7bfdd8b2 (name+title)
GUIDs
32
Filler GUID seed
new Random(901).Next(9) ✓ verified
Run
Run 46 (seed 39,043,781) (seed)
Draw
62 · predicted N = 32 ✓
Machine boot
2013-05-15 03:07–10:31 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

DADA9FFC90278C91 CD618E7646784615 67E80AED52BEF314 06454B534255E775 F0B90F134B4D7715 6441DF8BFA6EC137 CA6BDCA7C41E2409 25EE682E63CF4EAB 6099B69B33890FCA A3523F70AF5EA0FC BA0E7DA60A5B1BF5 DBFC7E147F516328 2A6765659DA64961 6BAA63860E288BEF 37606462029D697C 69445017D51AA1F0 BF6D2717B40577A2 1BEA0A28803086C2 F6133A66AD440FB0 AF1694DB369DF5C0 C3EF8F929469732A E40CD70B88E8C843 2C37B3880132DF64 72034D65FDC91C63 BB3262384BE33F83 6D978354CB180723 BE3768A143EBE424 3F63708E835B24DB B17FC35986B34D54 EA5D1E8E7D41480B E7FA0B504B575A15 9A42CB3678D1C5EC 219A4EC7994C4896 3B15E59F1FDB3A0E F4EE7A9383310A82 B998A9FC566566DF E84F062C3BCCC6CC 5FB29A56FDE34969 99515AEFB2356FB2 1A630E728AF67947 90D905ECDA1D25FB 89DA80A0BD8A5E37 82EE607263C92765 8BB58EC41E3C8643 3F90D2B4C2A5DD2B E38055D1E94A55A5 700421EB73749F05 4AF4959BD72BC339 EA0AF5323C190874 A482E949CCF960B0 F5E62FB57FDFBBB0 85D5579BD1DEA23B E086FB1FC6C3E2A5 5166D5050FA53336 CBAE5A97BE5170A0 ADBCD682B3E02534 65DC56F13C407B9D 890039BC5FD09173 3B35B808E39E5210 035B63D663AD286C AA7BD20AA6592028 EF7F904FA714820F 7EC2074D7458B2D5 591E97E1E7554749 1C18C92182ED3140 0974D70DD6343BB6 A550AD145EA693DB A298C9A9065C96C3 5B21F54D334FC364 33C481AC4148ACB5 382AC0AA7F90BE10 CE2907F801BC88D7 5B699499FC17F5C4 01907A712979FA1A 20282DE4FDB9C9CA EA1C578B4D0E1D7D 755496440C0AC404 E54BD742F0F1C7A9 21285A5DE3B338FD 35C4561271B49130 011183134799F3E8 8012C32AC036D749 F6BD6ABF53D6F8A2 7F8615CF0C578013 33F5809910D46A95 381DBC1470BF0925 93F6C4E15B922E47 2B875A80032B8602 FFBC423E66BDE960 B6CE80ABA46B1F71 CEB2D7BFE99464EF 564072F044D72037 EE0449E50C94BA5A 700B83515644D126 CAACD086CB696FA0 A4276F314901735C 3BD64B69CDD9E8FC 5FEDA0E13EF08F0D 029A15A349DA8D3C 73AD09BCC2587DE6 068E213A927017E0 A27FA6EA4F65DD1D 755CD96C41C8D0BB C3C93A1ED8CAFAED 4E9C27E6512CC530 F705ACE07C97869C 06C6AD5A046F6EC2 4B3DC0A4CED4640C 0A252B88990246CD FB95ADAC5577A3AB 25DDCCD5C7C785C7 5751C4371C41AC00 8C3DB00EFB688FE2 27C652B42B433F16 6613ADD562E36080 BD169644E938EDA8 2905AC0FC2FC5EA6 A4B08267ECA30FA4 69316805BB8385F9 6C9FB87170F983D4 F9A5CA7CEABD3CB7 0862AFDAB706293A 6BC95DD1D2A901C5 9C69AC72B9D7A83C 3F24591F4298E9E3 BD96D07BE5AEA717 5E1141BB7E4D187E 6AE625EE738AD9EC 1C2715504ECE1436
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201305261607 (name+title). Key = MD5(password) = 3028fd6ece43c25d59b994fd7bfdd8b2, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 6bb403ae-782c-337b-830f-9443f829b6b8
  2 5b06a85c-9bb7-151e-a294-ade0e198eb05
  3 60957c6b-2635-5079-a261-26ce8418f3b6
  4 e1108456-e2a3-7efa-921f-128686fb16c9
  5 ebf7e478-c9a3-8e9e-8f17-13d17d7ae6e8
  6 fc85aa2a-bb7c-82a6-95e7-dce1e0b00091
  7 f0458e96-fe14-56da-a5c6-aa35e168e365
  8 b07b8be6-be23-4af9-9b7d-78231c825874
  9 8fdd9677-fc57-4112-bd41-e5e4b793f136
 10 6b3129c3-3e2c-40d6-af5b-dfdf11cd5d18
 11 73fba150-6327-02e1-9a5d-486a3fe574d0
 12 25be8b73-b161-8946-888e-1cb602ce2917
 13 002d8bef-e38b-04d1-90f2-5d804262b5a0
 14 f2627857-f601-13c5-9958-e22b103ac934
 15 1b85a0f5-1118-5485-9167-a94ee7df5f36
 16 cadfd459-25cd-68bc-b6bc-08cf5e8536f9
 17 0f3c3b5e-df17-5aa8-a485-ac5eaf5ca027
 18 014d6967-d84f-5d98-8fde-c0a705e7fdaa
 19 66651fcb-396d-04f7-a9bf-c7a17dc23d93
 20 1a10f4df-6f8e-16b0-a523-bd489fbc4291
 21 0c473b9b-eb77-45b8-bdb4-aeb4ea8c593b
 22 4eacdbd8-0dc2-8906-9cd4-f85645f371b0
 23 dc8ce3a7-ddbe-26b3-bbb0-cb0c544bcb78
 24 81dbc4e1-88c8-72b4-833f-1f4abb82580f
 25 be60e1c6-04c7-00ab-b467-3463d30d9e1e
 26 73ffbf82-6535-076f-8c91-ecf44b32f686
 27 520b9124-c800-5738-befd-42c57bf1ca99
 28 073b2276-af06-8418-9d01-3194c94638c0
 29 5a23c356-c3a6-336d-8f3d-a7f28b1730c8
 30 7e13ce42-8820-65a0-8396-ea8fe91573f6
 31 1196105d-87d3-7e30-9a5c-f07217062a06
 32 aed87741-2e02-7396-99d8-23bde4820528

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 31578854440801565501482700583677. Exactly this sequence comes out of new Random(901).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 62 of Run 46 (seed 39,043,781): new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs