A858DE45F56D9BC9 archive

201308071506 1jvmka

explained decrypted filler

seed 83

Metadata

Post ID
1jvmka
Title
201308071506 → 2013-08-07 15:06 on A858's clock
Posted (UTC)
2013-08-07 12:06:58
Timezone
UTC+3 · title 15:06 against posted 12:06 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308071506) = d1bbaa227875075ca7e2c2b5bc3ef22b (name+title)
GUIDs
32
Filler GUID seed
new Random(83).Next(9) ✓ verified
Run
Run 50 (seed 2,278,890) (seed)
Draw
13 · predicted N = 32 ✓
Machine boot
2013-08-05 20:29–23:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

0562018C1DDC3AD1 E0A0EA950CB41E08 4DC76E79DF710649 DF10014E546C0E0C 2CA51F98E252DBFA 9913724EDF603560 28D867AA675410FE F6A8C19065CF2A37 40DC3B8A3056E758 E2C8D1E0E24F0604 391D0FFBF26F758A 67C78E0F6F83A660 3809B0601151FA54 E0ED6979DB83B470 D3A1B08C59587FE4 B9093A405F8375DB 9ED9EE60EADDD79D 4F429569D7530FEA D5285BAE100F7D52 3BB63B1EB41C9A70 4E48969B7137D37E 0DCB4887C051BD5F 3F97F6EA82A30ADA B59B4751B4A586F3 6EC88F576651267E 530642BF406EB4B0 76E035CA2FA2A09A D962A4E639CAED4D 35C0B7E986FBEA32 688A1C8EABDC84D7 2BCAEC2CA02B62D9 46FCAF77F168664D C9D3677706C88E58 EB90A3BF837C9294 7A0AFE5A4200D754 979C184F03730A67 EAE0838A22B914C5 E739F17F34D4CC9A F801D93398ED5720 50840964C3057DD0 13C8593D2D97E970 0A1CD99960037988 44F778F39CC6224A F52F91CEEAE24C6B 93FC1004E2E95B47 55774733CC083CE0 BF740AE4A1FB5E02 1A35ECEBC29F54F0 2FDFFF54617BCD39 8CA01855182C41DE 84C7C4485DBA0AA2 D8580A5E17DE8B84 19C878F3F2A35673 035590D4E43FE00B 3C5A4B7E7AAC288F 032661D3EE722FF7 37CEBFBEEE44B66E 124F2921AA818609 CD68FFA6CF2F1864 C45F9B610EF34243 7FCD2DC0A4AF3D13 257EEE31170ABE4F 43E9E7104D218021 4C337CAB234315DE 3285B16AF9DF3899 BCCDDF34DC2B7275 EF5A8B6A15B39E8B 5DA4D4E3F8EAA4A5 D4D73917CE9692B9 8218145FAC2125D4 2B2107B9AC817C47 CE09A661E08ED08E 685D363D779E37B1 C992EB0642AC27CB 80524ED18BDDAB0A 22D49F551A1F9E90 72C11688A71DB093 42B279E7492444AA B12B383A493D27D1 07BEF4543BB092D1 A28F1E04DA78CE56 0B100657B9B7C479 3338B01C24F7CCAA 1FF1A219E046E0F2 2A4F94C292651AC1 186429953FC74A89 BDE20D454A793A07 EBAABF34861D1F33 AB24CA38759E9245 D209F36DD46B8768 6D864C9B6B40B799 E6346911D50A999A C35D6F4BEDAC4221 A998B6E4F0BE3A46 79A340E14B093096 49E96813B41185D8 8EF4F3E0339DB6C5 5DAD757EB433A7BF 0E7FEEF07CF9F643 61843E060AADC969 46D6332064549058 DD0A6A1279983EC1 F2361EE9B520A58C DB39E1BE81C509FB 116630B7ECCA4B71 2EFA257DCD5728E1 B66C53BEC6AFBFCC 18D9891D76AEC4DD 00D0319E8662D568 025EDE03806C70FB C021A93218EF06B2 5660190860287239 4F1C175B65BA9028 A403B40FB269180D F1C0656588A099C4 C7DEF8E67A7FC77C 09A3F216CC56DD4F E7CC11ED0B38A451 F22CD24B1BADFFC8 35BE7EBD95F0ABBB D7671AD03B081474 4AEC452A462893E4 E1B904517862EE4A D7A62445B68FF3CE 02E07B4E4F0EDA52 82B4E4371A0A918C 5181E925BD9476A0 0CFFEC82BFB35052 C80ACDBF5FB50278
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308071506 (name+title). Key = MD5(password) = d1bbaa227875075ca7e2c2b5bc3ef22b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 7e8eea35-4aea-0b22-88a1-ca56a8bed136
  2 457279f2-8e69-15e9-8cdf-4bc0c6868f72
  3 77f3ca8a-b6c4-7490-a9b9-1490968c464e
  4 c2e815fe-b323-2e62-88e0-f7b5afd8ea1c
  5 9b2ff441-fac3-6ecd-b653-6d74f5268338
  6 979dea1d-e81a-0896-a90d-8921a03faf24
  7 6785e0f3-ddac-0610-95e1-3de9eb8242c0
  8 7b7dd47e-0fb4-0d90-8822-02641b9b9d40
  9 fafef5e5-2253-25cc-9a9c-682bcd121f69
 10 306dd957-9674-7177-8d75-f2c215da0614
 11 8f194cec-76d5-3946-94e9-3e93e8c97781
 12 98dd89c1-b1bb-2c63-be36-f8c27580f5b2
 13 0cb05bde-a63b-6cd7-8a01-698b86ff18a1
 14 5d565421-43cc-546d-a595-4c7df795cb7c
 15 98c2752d-1adb-01e8-b43a-19c6d452a5f0
 16 1ab8b91d-34fa-75e5-b5c7-e483c3f5dbcb
 17 4269510b-8814-6ba8-b6a9-2a06f4068729
 18 78b1c6d3-18a2-418a-9362-ebabf0789669
 19 5c06d5e8-fc6d-890d-8804-42da2c166637
 20 04fce9c1-031b-4c86-9533-d3b9ab94f919
 21 6884af58-b3d2-797a-9171-87f06f384f4e
 22 817375a6-2560-1d01-80a5-07d8149f0329
 23 578b9067-29e8-0938-8a41-e22e8699262e
 24 0400484a-0212-089a-9f9c-dfad589cc513
 25 66e0c72c-8747-75c9-8efd-d41f5a8e242a
 26 297df651-49e4-8acb-a8a3-eafb0befb7c4
 27 bf7ff4f2-cbbe-2d92-aae9-fab01a8a4bbe
 28 439bafed-75cb-1382-b308-1b7635aec172
 29 832f1d16-08b8-4009-b101-5820ef78bfca
 30 c6a78608-6910-8e08-ab56-e1977bf95572
 31 b5939c56-bd89-7718-b1f9-adda65d54e8f
 32 a92b3cb9-1083-2bac-bd35-25aa19244c33

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 01726000273265076484710078214872. Exactly this sequence comes out of new Random(83).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 13 of Run 50 (seed 2,278,890): new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs