A858DE45F56D9BC9 archive

201307200941 1io2kc

explained decrypted filler

seed 942

Metadata

Post ID
1io2kc
Title
201307200941 → 2013-07-20 09:41 on A858's clock
Posted (UTC)
2013-07-20 00:42:00
Timezone
UTC+9 · title 09:41 against posted 00:42 UTC
Author
A858DE45F56D9BC9
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307200941) = 433ce7da5caf6a57ab863d6a512d7747 (name+title)
GUIDs
32
Filler GUID seed
new Random(942).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
22 · predicted N = 32 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

7502EC0A59026277 68B6514FD643009F C8CAB5EA19BE0E27 0D4214EDF98A7034 BB360C489F85CAED F1CC04E61818283C EA6A3137D26990F4 EC0F13F71CACBF4B ED1E0D8909E7655C CF9428497443A683 4BB3E1C4E4DAAB4F C2A0BD64811B7B56 95A4A19F2C98DA57 2310BF364C030EAA AFCA030A7CE07605 45AECF0E23BEBE4D 5C4C341F3C8DE6E4 AD870D7B6D1C8CCC 1F8E350FE870607F 257D175749294BCA 5928673E48DE4781 639034E494FA4B26 9602F098FE037B56 689A5B6359D4E240 D26919F66425FED7 09626FE69354BCE4 0029FAD03234657A 46B59ED30C1DE528 80179688C7486570 35DA8B059B57F0C1 9E789F02AA8B7FB5 FB94DC24804E6C7B CBC2BB49D9F8F671 7414BE4C5B250A06 516AB8D41E66D61B D68FA92A837BF3C0 C7EE391BBFFE842F 86855B6F853DFEDC 63EBE052ACF4345D A259107284F1F95B D18C74A1149037AC 2A97B4DCE1F8A9A4 14D6F73BF10BFBD5 A7ECB59E3E490BB4 247A288ED6BA32E3 431338DA0B594F0E 0D1486B3B826ECBE 321F97B6466831BB ED78B3AA6A6BC824 9E854524DC504718 2BB316D4E939CF25 AF914B396C2FC924 3607940304192E8C B6A3315A3D692031 CCB612908E6CCDD8 D46E34CD752844B6 2804E3042C55593C 873D405FAD36878C 3684CADB28657C5B BFBB01E868C32C7C 32C7DA1C7FE8228F 9DACF9D8C01888DD CE519131E2786535 AACF9635BC4BB25F 69A23CDC91C59333 A0C228EE64AF6BD9 467FCA73F5A9C491 B2A46841D08B3938 9585C1B9FC8DFDA0 ED8ECE6231B34EED 6BC4D6B5EA385F02 26060682156D3B2F 758BA2B43D56FA08 4A32C358EFF67082 E32679455EB19875 AAF8F7EE2809A0AD DA36F9BECFF5092B 0EC7D1F9B4924549 8FBC82682BD5F805 158B117521415BF0 BA8A511123F6C1EA 92FFD34C4C281AEF 6E3B662CC63C8F5A CFE62B2E5697CE55 E57434AB25500E3D 17C32F5EAD134985 C4F4478472CDD853 C4FB590AE274B356 9FA438017747BCFD 2F8E094070891941 A596206B038FE080 59C5AF0CCBA481CD 3D7C7B666BCC94EE 2EE74F246B4D4970 2BEA0F10E2C168E0 C369BFC7FDD6313C 58774097F79518E0 6E0A0B0587433313 47477DDD506A65EC 37455067194A901C 5291C2200B7E758E 6C3600388EE3A303 EFB0D9D0A8A3803C EF4C8F4DFD66D966 78FAAEFED176060C 9FBEECDABCFD0E79 DBEE10E19A236895 8FC7F62DB089D709 31B3414EC8F282BF FDCDDF101C940849 24E43DAE44A119B6 8DED72AABE09205B DE033BD254501577 025AB338CC423C3E 6B1C2C6C581CFAF7 D378265383923ED4 A63F1E3E72FC9BE0 3FD7F6FCB50B72F5 8F9EB6F56226D325 F2974DBCE08206BE BA630CC697D57851 193221A7E66B3682 5FEF53DE542AB292 2313107A8E3C612B CC20FC147C85A64D 7314AD2368CEEAC3 F559740DB05534E5 93E5608431BD58C6 47DD2CEC337D54C7
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307200941 (name+title). Key = MD5(password) = 433ce7da5caf6a57ab863d6a512d7747, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 548ad42c-0949-73ae-981b-aaf05bac9067
  2 75f6a04c-4d0a-1594-bdd5-e51c20f8cff5
  3 d29b1b43-3738-1b6d-92f6-814492fb6e8c
  4 feb7097c-30ff-557c-9b53-cb3cceec7e6b
  5 6dfaca03-781d-4120-8167-ae343b85d877
  6 cf27b390-13cb-6796-80f8-46977d20ec51
  7 788077ee-8bd6-8ed3-aedd-64a219d58bd4
  8 4419c5da-d610-0e97-bda8-2dcc28b0e4b1
  9 4fcefab5-0a05-4ea6-ab74-9a2bfff503d7
 10 956fde42-a466-5c99-a09a-fafe95826854
 11 aea70cc7-41f2-22f0-ab85-a9db5d3794c7
 12 cd7a40ed-9c2d-8b14-82f6-f4cf1347690d
 13 4bcbf303-1d93-128f-bf1f-e56922854672
 14 15e767aa-7349-4e0c-878b-1ec606c015cd
 15 c02fa31e-7f3a-38b2-8773-8ea7cb11db7f
 16 43ecb794-0e1c-270d-a4df-e966f28f5b2e
 17 0fae9c43-c424-7c84-aa2e-099debc1fa3b
 18 1ab793c3-f646-0110-b83b-9bf8cb7f9781
 19 7b6f7ece-6c7b-147a-a000-2cb8f8cbe7ff
 20 d285f6ac-3e6b-0fde-ae8e-e8a354fa34db
 21 d464c3c6-f279-8c23-b7dc-9b23b6740470
 22 41497722-2132-86d7-98ed-38dddfb5cd54
 23 88b37293-6738-127a-b8bc-8ac2ee5ba9b5
 24 bb781e9d-dc73-148a-8e0c-cca5e0daceba
 25 9840a5bd-28bc-09e6-a495-023dff23ffa2
 26 e6739acb-09cb-3ca2-8a8b-1ea771dba26c
 27 c68100b5-14eb-7f38-84f0-33e4f3e459e0
 28 f100f7fc-6fc3-3f00-a7b0-e2381db68887
 29 a0b6b4b0-d55d-6e79-ab44-0b55d702af06
 30 531ae807-39ee-6e5d-848e-2bef52248160
 31 c322bd4a-82fa-8c8e-a135-c67982ae93f8
 32 a865f4a0-68b0-5056-9555-92a6038cd98b

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 71154680452814327010881103736685. Exactly this sequence comes out of new Random(942).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 22 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs