A858DE45F56D9BC9 archive

201306100859 1g1ip0

explained decrypted filler

seed 472

Metadata

Post ID
1g1ip0
Title
201306100859 → 2013-06-10 08:59 on A858's clock
Posted (UTC)
2013-06-10 12:59:53
Timezone
UTC−4 · title 08:59 against posted 12:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201306100859) = 2c490529a7b88a303964e1f700d26328 (name+title)
GUIDs
32
Filler GUID seed
new Random(472).Next(9) ✓ verified
Run
Run 47 (seed 1,776,839,421) (seed)
Draw
12 · predicted N = 32 ✓
Machine boot
2013-05-14 23:26–11:26 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 2
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

0DE67ADBD607BA50 2AD2FB4B789E5E74 6862DCACF640A4B1 6DBF3EC55E9AA851 DDB3E87EBFCDD847 14D5D418EA7C0B75 FD5D40626F7455AA 3F801D587892565F 6D2FB06FC65BE86B 5D086D28DA94ED17 F2332590C2101D76 AAB044F56AE7045E 74CAF886635550CA 8C84D040729AE79E 6B83FEFA4A395039 0FC2DF22188C7725 AA4776B342C41AF5 BF5D3E85654D52E6 7DED7B52CCCD79C0 4FA876E98C8E1883 2B904257A5389A80 DCAECD55E7A63AA7 5D0C26B245AA7FD1 8508592B4F936875 B2F9B77755A39ADD 3C6AD3CA8C43695E 4E269439E8473CB3 B16AA22DB4103DA9 7DF755450BFF68E8 8FAD9AFD1CC57DC7 0EDC7030467303DD F9F36CDB548A31D6 AEDFE90610E5D7AF B5D312ED3057561B 486212CCEE93BE00 585896E43C02EE1A E04438FDC51470DE 8D9057723C911CDB 663DDE9E8B11AB31 C22822ED1492A5B9 9B85322C940EF542 F02E0B8C48719805 3E0F29AB9546B365 F60B739B862D6DC8 F404F86FA9C35A31 C00F87C67B3DCBAD 1E7CF9C29E9E0B0E F0518CB5F2B60C9C 5F9E6BA1869002A1 F686D837BE632366 F65E82CC1C5C0F72 1726F74C18DE3B8D 9D46852B13097639 423CACDB1AC0F9CF ECDDF51ED82D2C8F C379BB10D11DEE49 B6F06C6D4E0F5D35 BC1AD4764758972F 817660327E5A3C60 26A68A3A863FBC1A 53841629F7E8D963 D2F910AECCEE9600 86FBFBA2CFE82558 787F7CCFB15A6788 D03651D7DD2BF271 028DCBD517B7A952 41F33EFA97B229E2 5CD2C90940F7C178 0AB00C6CF40B0E87 9445865992705887 ACCAEF1366E37B3F 2412CA53A4898BCA 816CFBC3C1C307FB 4CFE54E9ACD9E7E6 358656AC4A3BADED 956ACD8ADFC66B0A 7D38BE741148FAC2 7CED52C5478951E1 690EF42B1D227C0D 4C0EA29F120F6381 D9684D865C4E48C5 4489CC4C6E10D058 D5AB44E88EDD025C 5A59DBCB51A1032D 57E00CDEBB91893C B889CCA49C5D3DBE CDCDF75BA2F25585 84F60C2FDF1AAF70 32B9A221902F3C51 8C851F91B1238FFA CB1AEE028130BFAD 5D239804D03F9FA7 4EDF247A0FC3B33B 3AF4D10988D976BF 849745146093B0F8 7CA7D5ACE2B18C26 CC2CAB12783572BD 8CCB56890AB63FBE 7D5755802356B451 409EE4BBC5D57B47 22FAB8FA12C57E88 794AF6FCB0A7BC48 0576533E20B1D2DA 56D07727580E785D 466C2BF46A9094DF E2D40004784D277F BAB621CDCA90B71B C19FD8906EF1B265 FC5F036361352D3B 676A8B5494ABAE54 CEDED1AC89515711 A39338D9B8B664CA 8A480E283A813B11 1F77EB537F866780 5F8E717C7925E768 C5BCCE071420D457 80BD5C3784A7E858 74BDE1CB587BBD9B 1B7AD9104346E4FC 99D90F6AF713A7C5 9A6FE7470E228CC7 0E784BB6C366684A ECD567E26273A6F6 17AE20A7E672A185 F097F4CB27DF0ED4 BBEEAD1834E9E2D0 211181AEF3407126 636655646227ACCE 2AAADAA7CF9E1A4B
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201306100859 (name+title). Key = MD5(password) = 2c490529a7b88a303964e1f700d26328, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5cf74628-4276-22c1-9b34-e5c0034093e6
  2 19cc1a05-dfa7-2d3f-a4e5-5689b920a4fc
  3 52229d24-91c6-6325-846b-1010df052abc
  4 063774e9-87f3-2a01-a32a-db453ddb3d72
  5 f72e87b2-99db-20f3-84ab-fae09592dabe
  6 3abd5f34-6953-0b8b-a1c0-51f3159422ac
  7 038e8bbe-fd63-391b-9472-8537f0bb2e4b
  8 71deb0a0-6c51-267d-bb2d-9f09c1e471bf
  9 b6a629b6-2e1a-3dac-a978-6a6115dcd634
 10 09e4eded-583e-2f1f-ad92-ed0bbf0aa186
 11 7f1ad48b-790c-08fe-832a-fd1f24922811
 12 3d9075ce-32d0-86a0-8195-4a8c9a410960
 13 fe275f8c-7c7a-02bf-a55f-083ce2f1e2f4
 14 da307e04-6986-0fc4-bb64-8934c01ddce1
 15 59c58d2d-cc1c-387c-b63a-6a21dc04edd6
 16 81233ee6-52bd-7d63-8d79-d54f39a42c90
 17 e95a44bb-21a7-2de8-aa2e-2cc11aed1cc9
 18 e5c77ce6-d917-5d0d-970e-d64fd43b19a1
 19 375ad528-53d4-4937-b5bc-3e29defd06bd
 20 26d3d9ef-2356-0fd0-ac98-bd8f906530e6
 21 77de5cce-e032-4f22-8a56-578ec07d8a40
 22 8b480803-c3c3-5f04-963d-5a5503f42ef6
 23 086acc99-029c-6ad0-8098-300785aca9cf
 24 f072bcc2-591b-8663-a4e5-ee16ebf202e2
 25 844b2edb-71ae-8bee-bc87-e958d70ed89f
 26 9b4d6cbc-6677-084a-aa86-da786cdf5970
 27 d1c68324-5c8c-6385-982d-1bacd452156a
 28 0b13f5a8-fe5d-1136-af2a-4bc23ae31fbf
 29 e708ec34-09cb-8f81-aca9-6145e3f5aee9
 30 0939162c-edc4-1cb9-820f-4405cb8038a7
 31 a7132b65-9dab-3f8f-8119-97c0886989e8
 32 eb357798-b5db-77a6-9934-4eef47e6993a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 22622032320800372540456880618137. Exactly this sequence comes out of new Random(472).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 12 of Run 47 (seed 1,776,839,421): new Random(1776839421), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-14 23:26–11:26).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs