A858DE45F56D9BC9 archive

201307210903 1iq1id

explained decrypted filler

seed 672

Metadata

Post ID
1iq1id
Title
201307210903 → 2013-07-21 09:03 on A858's clock
Posted (UTC)
2013-07-21 00:03:59
Timezone
UTC+9 · title 09:03 against posted 00:03 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307210903) = 58b6cad42de1a1020e913449a31d62c4 (name+title)
GUIDs
32
Filler GUID seed
new Random(672).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
32 · predicted N = 32 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

6EFD0727EFD672B2 FB09187E19259FF0 8DE93BB98BB17812 80CEF01D018528B1 4DBE59285A870526 13F4FFAD5493A257 7300F09EC6E6D3DC C15C64E675C2EB1A B11DF861B1D9CA55 763E8CC2C2181E18 02262EF578D5E710 ED507D742D78B9D2 9D5B18F084046817 08DE1A6619FDD54F B7B1BF7221502D8D 33BF9A41C2664CF5 0A3781DF685EDBE8 D5C50D0A62456657 A5461EEBC6CC536B 2B54EE81A9498BCC DAA39806BF7C191B F4AC15E536EB0806 C4EE30B5AAB3B082 2316E079013E8003 E9D82A7BCAB80D4B 4074CA427C7C6420 3DB976381F2BCB90 C8E6DED40F99085D 4BC5B42C319C409D F8596C8B9F918AAD 92E54EF7ECFA655E 9DC1FE5F9AFEEE15 EDB903E6CB5DFA93 0B437F261091B853 07E907253F8E85CF 0B22B2AF6B5C292A 6237599B38E7FCC4 1356FD9881EDF04E 1372DD7116BC7467 C4425A75ED288623 347CEA6450F4AC62 E7F48D7227665DD6 7D65B7B5D074796A 089DDBF7FB7567C1 DC6B16D5CA8B37B3 C8FFC66A05663F8D CE8722F85D85BACE 5389D05C5DE50B6E 8C9A72B5EC3ED538 ACAAC4983B30AE6E 39E260737970B05E 4EE4AF87180787A3 1313D234876F6BFF 96B2323AE71A1307 2ABB2C0781451AB4 A9F5F49EF6CC4610 2536356A10E8D918 4EDD46E4D892B1BB A348E5D322AC3BE9 71BC56DF68911110 A61ED75BC3003165 F372254F7B18AD63 BA82BE4195284698 F462FEAAE84CDDEA C8ADE7272808BA7B 799F215D8134D1E6 8DDFC2FCE9F5B0DF 57D4AF593F7EA56C E7BCD54E75C21DD2 707D18E701F69D88 BD180FC5A4984EDB FE80C9E7090A715B B8060BF6B8245E13 745929607E0D1BB1 BFBABCE1B79D768C A7CB4580E6247764 A4D1358E7A3CCCEB FF1951F4AB3281BF 17CF0FDEBEF0A55D 62FEDE1581D794BA 2B48EA66983CDEDA FE8210ED6FDA7D7F CDDC12D7FE74F34B 036F606A5832B4A7 28958E226EE27D84 55A164D81C2C8143 4DB86C14DA8C9F06 620BACC7E551B57F DA9CE686DA612630 14C5BC2CDA4F4434 9D9CA283A73689E9 23FA19EBACBBA591 1AFC682BD94F2572 08650EBF71A692D5 E18E48E9EF777272 560B7939B7B99401 366EEAF19775DD8E 6E2E67DA1818FC17 81180F48D5B7A9E2 AF3CF43808AD7326 CF3996B1B9095611 3D73B4BB4AE8352E 970847A05E82B372 F71A6E6BFFD94C10 1B27CFF42FCA3767 1B8F1CCF0BB489E0 A8203633929A1BAC 2AB30DB75534CEEA 7D015614DF88536F 1512953598D934FC 4CB02C34DC9ACCB2 883259179050CC23 1A74F4873A4B31AC 74FB210BF3516EB8 50DAFEAD07A6754C 2981E20B4C75C3CF 0DE31062865B4B95 ECDFD7669DE1E947 3320642B94686D81 5EF3CFEAF3AB0ADB 0AE1AB26C81527D0 F3CCD0E6E72BEC8A 36916C58A826F2F3 707EFBF615F8EA5A CA20664427F51399 BFB2508E6CDB3D44 D339C07028EAD9F2 47247F863B75EC2F 1C770CED093C4FC8
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307210903 (name+title). Key = MD5(password) = 58b6cad42de1a1020e913449a31d62c4, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e85083ec-4000-76ff-a594-8a7fe38360a4
  2 bfa5b2b8-9599-8d03-9c3d-4abcb491aae7
  3 46a63538-c840-4502-ab37-ba32ed179e87
  4 6e791333-52a6-8c01-9799-472b3f801835
  5 efa3dfc6-62aa-5f49-9e76-cb9a212f77ff
  6 d3acb412-025a-74a7-8799-30484c787467
  7 9268907b-c72b-011c-8c12-54c125d1684f
  8 e875159f-3edc-5da3-b9c7-00bc901260c7
  9 754b3914-47e9-12de-85a3-d309dcdfb2a4
 10 2c954580-3d3c-0d07-a8f5-1798cf8165b4
 11 d30dda25-75bc-317c-8192-0f2e5ea5d0ed
 12 baec8c4a-8fb9-0e81-8c88-78d667e96a61
 13 4a1dadb6-cc98-5fd6-b303-1947bad2dfd0
 14 01128cf9-f92b-00eb-a8b9-1111340aeff0
 15 f91a5fd6-8461-3ea2-8154-281ce2debf90
 16 2bf3f9d0-d5d3-6eeb-93f0-a711e73c5965
 17 b1e93ce0-a240-3c8a-bad3-36ce66b10eb5
 18 885e5340-17f9-5779-ab74-da7c078353c7
 19 16dcb35e-3402-7707-b95d-152eaded2380
 20 9345dbbf-49a6-4583-83aa-1566b7532871
 21 eebfdb22-1b0a-0e56-9e22-49e6ebc17234
 22 600f0285-3ba3-6a43-a46d-7b3a29ab43a8
 23 9b696ca8-8ff8-512e-9998-38e499299610
 24 5c136d29-6f82-7bc6-8260-faddfb8a2cb2
 25 748e946b-9b7f-5aa1-bacd-1d8aa30a731a
 26 b9d388e4-14f7-64b3-b852-4ecbb637a8ff
 27 168fbb97-b9e6-6a02-9cea-7e9508d50f04
 28 a0160df2-5e41-0442-b972-889d5149d573
 29 1c960b64-30e2-13a0-b733-1a3515cc8acf
 30 253bda77-740d-2548-a66f-8fc0639a52a2
 31 2eda5a28-6076-2c3a-8405-b9e1674aebd7
 32 810a19b1-61c2-4ab1-9fb6-8740e67b41a9

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 78485705103050363574065756601224. Exactly this sequence comes out of new Random(672).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 32 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs