A858DE45F56D9BC9 archive

201308101506 1k33ba

explained decrypted filler

seed 635

Metadata

Post ID
1k33ba
Title
201308101506 → 2013-08-10 15:06 on A858's clock
Posted (UTC)
2013-08-10 12:06:55
Timezone
UTC+3 · title 15:06 against posted 12:06 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308101506) = 7cf949ea25bc01360df9f557eba8e8bc (name+title)
GUIDs
36
Filler GUID seed
new Random(635).Next(9) ✓ verified
Run
Run 50 (seed 2,278,890) (seed)
Draw
37 · predicted N = 36 ✓
Machine boot
2013-08-05 20:29–23:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

0AD957141AA8189F D858D15710A9270C 523045115089CAE6 D3CA7E40F641352B 325AB5D4CBCFA0B9 494DE560D651DA88 921BAB2D7043675A 6F1184C73E190CEE 99BA72EFA2332863 374E827D31EB6243 87076A96719188F1 0045254212FD0EF1 0564291FB1C36352 952E3C0B506559C2 6C604F8B918363E7 6C6B35ED37DE3E30 50C9AF5987D2F957 84D0E0D7C89EF7C8 0C786250B754C8A8 5D6CEB63A80C92EB 1574F8821E74D5A7 3C1180CCE5B97B4E 5B05C7685D380972 6FF8B16C0BD963EA 4906225CA3C2D6E3 F546A3F8B04979CC 312D83C6825FCF7D 43DAF661F40D036B D657494ADA492905 4BDF11328D15569A 40C471E0712042A4 747A7B1571789A77 7A53C191DC1022BA C733696858593CBA 87B5B4FFDA5C9040 D99930CEA843F269 2DD3DDD642A97D6D D97B39BB173840BF 601FAE1419A0329F 4F5C7D0E11DF8876 6D3057138C3A8580 064B83047529172A F53E014E7BAE7B2F 76491A67C38E212B FC41FFC5BFEDFAF5 F0C8917555F8C871 2E43E84C381A2DD7 0EB84669099972A0 996D11F52EF85AAD DFBBB4337B8B9D54 7A3398E56DFB5EE7 B11DDDEE23A242DD 907D546028C1000E FE18F0905016724A 041ACDA63C8FF572 F4D2EF9ACAAFBD76 08DB68143ADBC35E C32993CC5387FCAA FFC1FDB426AD18AB 4085CCF44897C325 4D91AA2B4ED71080 C8D465221611E5BF E46AA893D05294DB 027DD48D21DC0903 5D2F238CC101F918 B3EDA379A173C0D1 1B2FFD4D17D886BD 171D06B24D798560 CE3EE0DE90DB258F FE9CC59DFC08BCBB BD06F1DCA50CEB24 E2E52376869A0D19 0734034C85758F73 287CF7ACF6D9143E D5CF16BF351CFDD0 FB9F0441BADDA621 4B2F1F2F88DA29B0 56CF36407BEC92C0 1EFA18162BEAC943 2EE1E61676AC5E7A 9969B631615260D0 7EB9139F865F15D6 94EB08EF1141F32A 472AC9F69795314A 0EDBDDBACB2446F2 FAE84A12E0EB83B6 95B5521F91FAB6F9 6AF092B80CED49F6 60C9A1CE66668E38 1A6141F273BDED4E 272FCDC16CEBC79E 4283C32EAACDEF53 6AEB55323CEF2051 3055A8BA754EEA19 CDB9E939B8342FAF 7AF84882613AF909 9A12BC6718EF280E A4543804D7CCD369 823D1A340BB8169C 32361157DFEEA153 F0749ADF94025392 67F9412A754AEC75 808E5F5050D2A1E4 F581C0AF57A7CA69 71492328B8151782 77F833C78C124CAE 5AAEF4EC0DB4C5E9 7E3F89B0950749A5 60BC4E0CE5F5B347 AC12947602AAEDC9 A1D025BF0193D984 89B78D5187D7A7F7 85238F357DBF628E 6EE2A30B08F2F866 0F25FF7D7C5A820B E442D2DF447B8ADA 57E58B52923ADDA9 B4D9E53AB0A66B73 D0200D4F4BC58A21 AF59585FC814B1FC CB7555DCF29AC252 9512B3227178C11D F25CEA762B3F1B43 ADC33A2DAF61F5FA BEA7B92B9C4D01D9 061F86C86E030D5E 9597687855AE14E4 57D6CB070571AAA8 0FCFC8EBBB8BE4CE C50DF03D3BBB98DA CD470F722591840E FAC22D8E49119C85 3696C39DEAD787F8 850953936FA02D6A 4EDA5E8DF23D8402 1CEFBC95096874B4 458D9F13BCE5B439 DD635878B5679F12 450F139076BBA628 236A55D5616E4ADF 85AECB335B36D989 0DED3869FB9040A6 A171AFEC15A1F4F5 B1208038F251459A 8F1B77FEFAF42E78
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308101506 (name+title). Key = MD5(password) = 7cf949ea25bc01360df9f557eba8e8bc, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 54790a90-6d6e-4672-aad1-44f94dd2712c
  2 abd6cec3-c609-1d4d-a737-b55d8312addc
  3 96207a86-a7f7-55cb-9991-fe1233c49de5
  4 6672d122-5ea9-08bf-a24f-18362342f2b9
  5 65cd0da0-8556-8e3b-baad-fe7f393c494a
  6 653f5541-df82-4b94-94a9-a33e9f4e9492
  7 c2e4f5b9-543d-3af5-bebc-9f1dd36858ee
  8 963e1d7d-d39a-06f4-97d2-74a80de76e2f
  9 a56d2e27-c2ea-4558-bcf4-5dd3bf92543c
 10 4adb781f-69b7-3f96-a607-39f5a8599963
 11 de35e937-abd9-1ba8-bc09-fc941d58c831
 12 8d6849ca-18b2-1f2b-870a-71cc91b9e450
 13 a2022098-4ac3-1f5d-8502-d723dd1f4030
 14 7dc0bb7f-8658-79cf-9921-08f77ff1f89c
 15 7b8111f1-b334-4120-92a9-1b9add06d3cd
 16 c3c5165e-a2a3-5c6f-9497-11d1596b7708
 17 9e4fbbdf-23a9-7238-8469-684ec1752534
 18 ef0f4a6e-d5a4-6789-a41b-9c33a404b51b
 19 5a914a12-f01d-7ade-8144-eb050716b5cf
 20 c7d3ad25-93e1-1b8e-957d-4c0822bd29dc
 21 85dcc0bb-7c40-1dd5-8f60-b1125fe56373
 22 1e05d4b8-89c5-5c8a-a57f-892adf00baee
 23 a4161b55-c7b8-2cf1-a193-99874bc8bd4e
 24 9afa5b11-281c-7432-9252-9537989b58e4
 25 4bec9071-539e-8e5d-b1f2-188e4dc8c682
 26 3a487b3f-3256-8fcb-a4b4-cd26e0e95235
 27 224abf3d-86ed-7613-bd88-d63217731a39
 28 490ea255-3145-1059-a967-ef76d3f1d353
 29 6c6d040c-74a1-8690-b7c8-16df31668d88
 30 991a8c52-a8b8-44e2-9003-71193b745319
 31 9d32d2c8-41c9-53bb-844f-7c1915fefdf8
 32 8ff6ace2-0140-6f77-afb3-9ab306d32770
 33 a0ba6162-4a64-5b38-8adb-bcef1eb9a198
 34 a7d9d310-e65f-8077-8813-5beba7a01f05
 35 f748fe65-a948-31ec-8154-8d8a59eb59af
 36 f82d12e1-4b40-29e7-a438-48d2e8a4f230

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 415084304311174576711527887184565832. Exactly this sequence comes out of new Random(635).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 37 of Run 50 (seed 2,278,890): new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs