A858DE45F56D9BC9 archive

201307210913 1iq22r

explained decrypted filler

seed 758

Metadata

Post ID
1iq22r
Title
201307210913 → 2013-07-21 09:13 on A858's clock
Posted (UTC)
2013-07-21 00:13:59
Timezone
UTC+9 · title 09:13 against posted 00:13 UTC
Author
A858DE45F56D9BC9
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307210913) = 7bcf49b74ffc9c6d5fa7375c16695bbd (name+title)
GUIDs
32
Filler GUID seed
new Random(758).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
37 · predicted N = 32 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

449B6DB81DC20254 479224ACA244F09F B50AC604BEEC4CA4 29CF1383A4862A30 38C554BEB0497C61 96C4149FB6F49F06 817FBBCF85E4D4BB 5D73A139FE5B885C B5F19EE4962A3717 16B3E4814F81D051 2418B4C54247A029 3482BB81AEE68EED 34C2CC92C48527DE B9B07E23B006F1BE 8CF63CDD31267369 AF3FC05BAB5B17BD 0B8B4554899947B4 564E22CFC01CAEC8 DB4453F7FD0F79F1 793C5F9B32E6BF7D FB7393F561419B5F A97F10771FAC07A3 1B981F69570017A2 88642135A015A628 F034938D7A8A6935 442F3A09882538F9 39714DE8063E9A4A E54A8739278A529A 555C86D027D43E20 90C492E9DA5754FE 6849B3DE9A7F16E5 5252C792A78FC0DB EEB62C561BBFA235 CC50C930ECCC5698 C91E723C353A47CE 31986CE866E02DA6 6829569AF5AC1F83 345568CE46E14AB5 8DA81219D02F77EC 895897DEEDB679C6 93613C0A8C99817F 79B0D72A7D958110 CE3DD01F1E132290 44CC096ECA53F549 C79939691C0EE79C 62FA65814A87DC07 E497BCB7D66D24A6 370FD45B8A5B19B1 2FEBF038D5A50F50 BBC43A61CC41C12A 909C58AC2571538B 090A78017B48788C 5CB73CB8E91032CC C6C85761A5A590B7 BABBBBD506CB1589 7FE134ED5743C79F 82564D0234372369 D018D186C96C56A6 C7679874732D7E99 927A59C6788CD311 5FFD0F468005B809 7B17E881AD633350 55388C64D124E471 B659A5D02BDA67CB 4802FEED4E31B4CA 4A54D4825F26F561 BF22113E61CBCCA8 02662B9F4583489D E44DF9BB2AD68B2D 2086755465A6F294 5AF309BCE79F37E5 908D2FF7F2D23510 D866ADF9A096C7E8 5C1844EC687D385A 2137D18D3ED6028A EFF6FC5E83258AAF FB821FE0F3930A05 CEB7EF08177D509D 65FF3B4E3B8E828C 40ED0B4F74D14956 18772D12BE183810 B45A1AC9844D4990 61D214B461BB874E 037B86964DFC7CA5 D2B2734859FE2CE1 55AA5C8BC97D2709 3880932E72AFBD23 48A73CF8DE25E2A8 0536884FEC159334 E19236422A2BE49F 35E723C6F32312B3 64BE4B06797E7FE1 7694C49B7F738253 4E89B02015EE1DC5 9CD00F7B7CD30749 28C66C8D12677176 BD4CD179D722DE6C 9FE9521956C17A2D 36DA4745EA831B6B D90AC3CF038D3AC5 82732F207E04151E F383C6099763F4A7 A8F181F15B14EA09 5A138A8C1CFF0793 F4626ACE35BF380E 0C74870AD78DAD1B D85CA6F6100BA236 B3E9E1FF75E9E93A 8005217A347A1111 AEECB55595338AC3 B5F13BBBFE706014 66539B59F1139486 F5F8BEC00B64CBC7 74D9FE0D342F9FAA 3DFD4C33991BC244 140881407F2B2B16 EA4E28E0F55297B4 4529B83F26EFA8C0 AA566FCC30CEEB3F D66EBEE86172D413 A2C857959FE83CDC 9B53739912DDCAC2 E458789533A40A86 1BCE797F27B1631E 398E1B8D5625778B 2E3F98FB1D5A65F6 3904A060FE77F9A3 645BE7BD98DA55B7 0915484F70BEB82E
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307210913 (name+title). Key = MD5(password) = 7bcf49b74ffc9c6d5fa7375c16695bbd, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5f107e5a-d257-6c32-a48a-22a9bb360b6c
  2 0818c46b-7501-23b6-8633-c7fbf93a2450
  3 e6fcc61b-5584-5e34-a1b5-e274b51714bf
  4 deb1f172-3cd8-3a1a-a6e5-fec91a77fc61
  5 266bcf4f-1a17-3379-b385-f78982f53cee
  6 955fce55-6c82-8a29-b213-5fc4da8d71ad
  7 13b6b4b4-7ede-49f7-b1c8-02b84d64ea03
  8 110644ea-5ead-6fd0-bf06-72d0953373ac
  9 37bcf45b-9441-6093-9921-d86002168fc5
 10 2edb9b34-f3eb-7ae3-aa53-d3eddfbd3065
 11 169e8886-edcd-6579-a39a-4540154c059b
 12 173730bb-aff1-2df5-b2d4-eb918a6902a2
 13 7b178997-9cdd-6614-b594-3e5fe93fa657
 14 8806ac7d-d76a-7704-a828-ff48e7b6cbb6
 15 e9e95a76-f94d-5fa9-b287-b7accf035cfe
 16 eb9079f3-a920-350f-8c06-da0c3a8cd93f
 17 010748d4-1991-452f-a9c3-33bf0091ebff
 18 0df9a099-026e-8121-8ba3-e6cd4fa7d00e
 19 1113cc29-d73b-1113-9864-843d12bc94bd
 20 b293af26-bab4-708c-bc9c-c0cdd0f4bb10
 21 ea9aab16-b168-49d0-a99b-2a3a1a0bfdc1
 22 e84ce79e-3e18-7bea-9311-da935d5d2ff8
 23 53c3727a-5980-0341-bf99-0c006496b2a1
 24 cba08807-8a99-785a-8fcc-512f9cbe9db7
 25 267bf73d-b5c8-8bf7-82df-f5c40de4db1d
 26 1595cf5a-b0c3-0429-9625-aa9005682124
 27 2a7353c8-c6b9-5916-b567-6af5cca8e00c
 28 68fae35d-f92b-30b2-b729-22659743c0e4
 29 31e3887c-3f8f-8fd1-8235-2a990f5557cc
 30 e6832850-8795-41ed-af8b-2737695ae935
 31 f8d5330e-290d-00fd-a37f-1ac866d7cdfa
 32 ec0e1cf7-e285-1026-8a75-73ea3f9960d3

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 62533846676267534817470780538401. Exactly this sequence comes out of new Random(758).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 37 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs