A858DE45F56D9BC9 archive

201307200943 1io2oi

explained decrypted filler

seed 939

Metadata

Post ID
1io2oi
Title
201307200943 → 2013-07-20 09:43 on A858's clock
Posted (UTC)
2013-07-20 00:44:00
Timezone
UTC+9 · title 09:43 against posted 00:44 UTC
Author
A858DE45F56D9BC9
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307200943) = deecdc91f885904a9084f64f050b2bdb (name+title)
GUIDs
32
Filler GUID seed
new Random(939).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
23 · predicted N = 32 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

942E07A9639FB6D6 E4B31B006012E9F0 6728E220D6D09B85 E1AD2554E588A685 75EBE5EE45525118 045AECADAB9C5823 110FD10D0F5761D6 7EB7AB7113B3DCFC 23F03B13DAEC698B 66156BEAF5FA7F96 5628CEA6FAB37474 EE17CCA3966F0F01 2B57DF39A3FE80C2 94B6A70B8E474850 E3D177CB796DCDCF 8C417B71633D8E97 E7447AF6B8573381 47CE04204CCBC15A 5524B54DFFF1E02B 6F658E1613C71300 FEF98CDA903107E9 E28003E1E80280EB AB5C16B1C408A1E5 7D61D256C8CA4792 7BEDDE6964BF2DFA 95F0A9DBB79C1BED AA28F3C45F0782FA CD6BBC711B15162F 3EAF05D537CE03B4 AA2189C2A80191EC 2018BD10CD829842 D0E599804E7D2648 3C80166958F328A1 0F75EA0BF2F8599A D8A5C740DC6C8BAA DD9FEEB24F3B8C5C 800239CACB11A10E C8BE709DDAB79B1A F1C24546231AE87F 83296DB90FD9F872 0F0868F3D5174E60 5705E41FB6A9311D A422E2C7DED9D997 F8A3EFF644CC33B2 66628D4C09181A68 0023819EB90F7CA7 0441D817A1EF0691 889A32DE4125C035 5491A230227969B3 839623806D4AB491 5D038B3FB7D8EC46 DB4A30A147516DEB D66A3C4868CDA740 138F4ADAAC3CD5A5 744C43A160AD2A99 9F96927E6DBDFDF9 2917E4064793BAE9 F4CBC180F384A7EE B3BC5D9840AEF689 82FFBCB1B41F42AB F424FD513B4889B4 F09284CC408368CD 543121AF26767115 20EBA9A2CC8084B4 97B4AD487C6DB25B 2B971C09BA7CF0AE 410868433E3DE321 90AE43EC70FB7533 06D9090F458A7FE3 45D003A353200280 DE21E9FB536DF7D7 074E504B34D788F0 6C60A2DA5855A694 064D1933323C1AF2 43A8FE97ADB61D02 5F5E38CC3C52CB0F 5025B34F71AC1C04 3CA70E026A16BF19 3D032D371DE9B9D6 A4A80C77F93FC777 35F044B1321C8431 18480B3F282B4340 2604154394144968 23B9E5B3BCC9208E 2903E07337D410DA 08490E013CBFD8FE 4C2953C160B2C2F2 FC8CA7A96E70F078 FC709B0C0E05E3F1 8D92CD56370E4F20 98C330023E3255D9 CB2D70810D8413E6 EB21C0EC843D9B89 E238E0DADDD76122 8FB692FC2BB3D40A 94C1F64A8A25CAAC 6123E30847C4270F D576200E0E632B79 38EC88BD1CE20689 986ACCA51FCD3ADF C8F45D3403A11FA1 B2C6564AD5CD8674 49F9BAAB4FCCCBBE FE06BC9F8F4313BD 5E2E835B255EF4BD 447383E5825192E7 60ED6746C38EB663 85FB27EFF10E4D77 6BFCB9ABA3996FFF 4B9F15E3463BD931 01F09E738F99B5C3 47609E5D0A330ED6 E406C61E127215DB 622EC53A88F688E6 4402B333C76ED007 611A9145D34790DB DC8E53975299EC14 706B80AD6538CAF3 B52D9634021768E2 6C4DE70795876EF7 7FEF704A1342171F 4854E0C16C5CC173 995BA6E14FFD2C22 B12BF6CCBAFBDED0 57BE8E33E85E62A3 8C2385ADA06C8B09 13E8374FD737D689 B9853CB32FF976C0 AC08BA26BA45E73F
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307200943 (name+title). Key = MD5(password) = deecdc91f885904a9084f64f050b2bdb, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 219b8f65-9895-2960-b118-e570d2c0a54d
  2 3a9d12b2-7488-322b-bd28-ece5c86eef27
  3 f18a9bc6-94ac-1c2f-8cad-1da7a444c678
  4 5f98e30d-f3c0-8766-9a35-0b31c8ba3bc4
  5 cbeebbd4-379d-1f8e-9044-01937ee097eb
  6 4fb13671-933e-1c9d-ad4f-99eebd66fdd4
  7 d36d0d40-070c-518f-bbd8-61c0e65d7f8d
  8 460fb5eb-2393-4495-a6b6-e74078296fd0
  9 e0b660df-91ad-1228-b684-309582d5e0ad
 10 95ddce37-1f87-4d50-af6d-04c8e60c6d17
 11 f0332933-f3ae-0e5a-ac57-6dbc8b7ce6e1
 12 8d148467-4a32-5b8c-9888-dfe52934dcec
 13 fdcf3ce4-927b-1cd3-8ef9-01345a77b8d1
 14 39a8c03a-5bbb-8291-b41f-5c62b936e55b
 15 3f9de3f9-437c-2834-80ad-d99413ff68f6
 16 34809818-cfac-43fc-a370-7171bfc62809
 17 bf6367b1-b121-5f08-af9a-e1268169967a
 18 2eccfb78-b6d9-1425-a143-bb3dc129956a
 19 c991102f-61ad-021f-b904-ee92c70ed780
 20 19aeedfe-c8b3-8aeb-b486-683d5a8fc0d6
 21 4f682c29-de7e-5989-b76d-386257d21956
 22 dd6f6c52-2c2c-1a53-833e-5f0ffa37e5ae
 23 e4d7ec56-983b-69bf-8ba2-91a138c16d8a
 24 2318ed1d-e1d0-0e7f-b35b-1b8ac86f2534
 25 0f4de1d2-e045-6266-8189-6cb2957bd7d7
 26 7da4b8a6-da5b-4b11-90e2-ba10700cf072
 27 01bc0cfa-bf53-2479-a2a0-8d1480809a8c
 28 cf725a2d-cc8e-4341-a186-217391c61c6a
 29 5c3a64bb-f93a-8660-9c96-a50a3a0a8021
 30 0cafb891-c3f0-2d1a-82cb-f25d5c329aa7
 31 de559c3f-393c-70ee-9fd9-85a855cf3fff
 32 c4bed0d1-b381-78c1-82d5-68bed5e1d18d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 23181154140518245108516064248277. Exactly this sequence comes out of new Random(939).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 23 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs