A858DE45F56D9BC9 archive

201307091759 1hyq7t

explained decrypted filler

seed 276

Metadata

Post ID
1hyq7t
Title
201307091759 → 2013-07-09 17:59 on A858's clock
Posted (UTC)
2013-07-09 21:59:37
Timezone
UTC−4 · title 17:59 against posted 21:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307091759) = 0f4ffbb62e2f3386b3a6d0bb4f28844c (name+title)
GUIDs
32
Filler GUID seed
new Random(276).Next(9) ✓ verified
Run
Run 48 (seed 387,048,281) (seed)
Draw
23 · predicted N = 32 ✓
Machine boot
2013-06-12 10:29–10:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
9 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

0BF5F21450272F34 65A769B22F7441DD 37C650B4C088046B 4BB0BC6E836808F9 79747BB934C26E41 EAEBF1ED76146F5F 1A26F4D78EA61937 FB1D73D0DBA7B7F0 92794D345BB1744A 5704358F8961AA34 73B0270D6C6571EF B8D902A11828B0F3 22700B9E6C7B993E 09F418C1BD7A9D66 365B24E0175560B3 4DA9D77588BDB92E 5DA0EF230FCA858B 7F757F23812A9A98 E57E3B15DAB13A45 C39FEFD3F69CAE76 5EAA313436AFC723 D7E1F7A571D41D40 04674061EE8142BA 909A783D47FDA630 5050CF14605953AC 0B262B777AB6DCD4 CD968F2405CD4FE6 CAEE000F4DF0D8A4 E1AD9D2B1567D2EC 3BE4BD44A7E570E7 5CC52D6845A6261C 4E5535B7E0B1ACDC B405FF6865FE2903 7FA4ABF13F24574F 5014F8102C34D96F 3995116692EC2AB0 0F36611147BAAF18 2F47AB6A6C7C2A6D C7815A2DEDB11ABD C4846CFE9E8143E6 1F514F06A232A910 4D04C8BD3EAD88FB B759A71AB7569BF0 9143053201B98274 07044DA9BC247500 E41FE167B6AA0E8B 35C02E40790EC589 87C3E8253C459974 4048BE94335CCBD7 5D438DC0655E7914 1C46EEB9223D1984 29B63E4D54A37AAB 6D7DA355823DEC1A 4904A9140F396D69 5E4728BA7C4F530D 9B803FB061BC0E53 B88A9002C8098DF9 8B1F64FE55E5A247 45D54EC7F5BCA309 382E7AB24AF35C47 32A3F38340582B54 EE8B0E35B2A6C3CA B4173EA8C961EE00 ECE58DFDBAE687CE BB82E02C37590466 79C6D0D0B8CF8620 6A4754F7B6537F4C 5F77997DD1A0CF6A 147A0FBF1A5DFDC2 73F162FDBB06BF18 9DE9621C420A5343 3E63D8BFECB4500A AF01C3CEBE6829F6 31D30B498017051D EDCA91131C3F6FB7 CBC94C7161569C71 4FCDF93F9E2E9BED FCF2E091E15135F1 0DE8866906A4618F 3B43FB81C86F5DC8 8469F97A8868C060 BE98FADA24C95144 A3A8AD1804BD9465 7B231AD1F22C404D DA12E75616A615FB 4E03516004F32435 F4E09D1C5A84730C 53AC065503652665 EA7C2F68CE1AB039 E7385218B09A1C10 33A56D4ED7D56305 10783B043FA5C55E 62595114B9270549 EE2B1EC4C04223D7 3FB501E418AE145F 3E81882A73D4985E EA8D271DCAA651A8 EA58E2134C11FF68 AB9D595071237B57 E36FEF05523336AE 4F81C95150FD4B5B EE96702D41A5734E E10689E26D1F98EF 1F4CA6E85B8C010A 902E732CFBB3EFC2 7BDCC04A0BB6516E B496B7BE55ECA707 14AD7B9F61675B03 85C36E28F6AA1D8B FF7FD41A489BB3B5 EE373DBD3707335C 4F753FAA8DDCA1DF AB1C9A789BEFAFE5 13A23785006B4808 E79D477633F4B2F8 70190E04BADA5E94 2F0FEC1A7796B38C 0E2AAEF665C38F5A D8D9192853181631 FB1A0E31FFD768A8 CA14F412FF345507 3C9AE95BED0B99D6 DCD71B03841651AF B2F02A12F768920F F08C79F9C3EA6CB5 68BA8C11DF1D56A8 4D8E838B073DD620 5FCE301DC18D6365 9A43F9F9A6F5D296
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307091759 (name+title). Key = MD5(password) = 0f4ffbb62e2f3386b3a6d0bb4f28844c, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b62ec5c7-70f8-8a58-a8ad-6307a4077e32
  2 d568f036-1a90-7832-b7ea-24895cf828e1
  3 a98ce82e-0522-6c6f-a208-ab33c8b1f669
  4 dc4c8b1a-edbe-494a-b426-7f667d5db5f3
  5 ab772056-36ea-7b95-87a1-c3fe5f4d16f6
  6 e201ac25-0d55-65d2-8685-d9631328db6e
  7 15fb1085-8f6f-552c-9faf-5167f9b2631e
  8 c9bc2462-cf3b-8443-8dcd-dc5e870e5928
  9 6ad01ee3-93c0-13b2-9297-83f9b41c144a
 10 7015fd66-7c71-0921-8243-a00d1562f934
 11 d4d7c732-5bec-5df1-9583-992149e35885
 12 74e32501-c50f-85e4-9cd6-6b08c1717612
 13 276fa361-08bf-3247-b812-e60c8f426d10
 14 2d9c403e-fe76-0694-80f5-26f466779ff8
 15 a6310969-8930-170a-a5b7-8bb1772c450d
 16 53a98e75-c38b-3668-b355-3e9cf68c201d
 17 d5bd63e3-d52c-7a63-a7a7-53e5963c7e93
 18 ff83fda9-1d87-157a-ba1f-6ef35237c03f
 19 de75f631-4b5d-1033-95fa-ac5fb3294af7
 20 2a9be154-adca-1960-abe1-5a27cad40b12
 21 cd0530db-8e30-4094-ae53-805bdb6cdbb6
 22 ba78aa8e-7eb9-5964-a2de-b9ac163d77ce
 23 2af5f5f4-0f38-51f9-adde-cf53436e9796
 24 80babe01-d60d-414e-a000-4d09219e224e
 25 bd145d88-62a4-6554-8c2f-ebc3c697ce9a
 26 b16e39eb-034a-0358-89ce-d3e9168e1f03
 27 c054eec2-7ef6-2e78-81cd-9e0c40daa158
 28 e475b8a4-e35a-6e9d-a74a-513ad77bba61
 29 ced9b8e9-85e3-792f-8614-cb56783d86fd
 30 10a65cd0-815d-3a3e-8db3-6b490e8b04fc
 31 7302d3eb-3ae3-03b6-aebf-7182847b72e4
 32 a970f69b-ce25-1ba0-8ca1-ea38a7f5fe51

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 87647658105830137111455460267301. Exactly this sequence comes out of new Random(276).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 23 of Run 48 (seed 387,048,281): new Random(387048281), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-06-12 10:29–10:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs