A858DE45F56D9BC9 archive

201308121206 1k742n

explained decrypted filler

seed 620

Metadata

Post ID
1k742n
Title
201308121206 → 2013-08-12 12:06 on A858's clock
Posted (UTC)
2013-08-12 09:06:53
Timezone
UTC+3 · title 12:06 against posted 09:06 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308121206) = 9332fabefe1e5e6745e9f84b1e076bef (name+title)
GUIDs
32
Filler GUID seed
new Random(620).Next(9) ✓ verified
Run
Run 50 (seed 2,278,890) (seed)
Draw
52 · predicted N = 32 ✓
Machine boot
2013-08-05 20:29–23:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

13835503986C8428 5E4B811A0ACF2D57 5424D99AC8941A11 0BED3EA902C12128 DC07433E22102C27 ECDCDA56E027D626 2B637BE6A2D0C75A 6CD93539E1C7E58A 120A019C783ED545 F563882FCF111E87 22829F6BD8F5345B 64A563CD1F94D495 A384074D10AE11EE EA7D8B4CF66481EC 9290AFE9F8C00492 CD09814D86204654 A1CB442D4DAF5A6F 19204AE281551659 C075639A5D1530B6 1714DFC92760A911 FE6E46C43C3D1B3F 1EAE0C5CB0FF49AA D19CE5370A12F8F2 E381C8C0927A701E 2B8D0E273D5BFC98 51D6E1DC35557370 CB93B42A4CD4542A 967F68BCF908F734 636212014D6E2961 093573625E4D6047 CE9C2A200B8CDC99 EF349B7064488479 22C664241B65DE1E 53C51DFD38D9BECF 157FA3D5ADDA2DF1 C8388767C85B07BC CBF7A8D396258C36 EC5441D1C8DCFC5C ECCD06392EE84D7A C604E592882EC611 701B8D205E14A532 32DC401ADDFA86EE F30DA2C0F58296F0 085A824978415D87 1D5323709BEAD7F5 87951941CD46ECE4 05A635FF7781766F 26E5CFA21C543825 1B63C2C626E82538 FEB545F56DF0756C 69CC00BF74B082A8 A28C4503971E341A 549CEFD6F4BE9FC5 FECDBB60F1604B72 73D98FD846A57A9D 648D05E2C17E061A 53EC256EB1FB1EF1 4CBD1527B1AD617C 1E097DD76EB87F30 BA2242C1C8A6CB83 14BDE37C1290B768 9D4F92C7C6067E83 215E3CFDD5E8E5B7 5862748D56875B07 4D72FFFF3CB28774 A5D7249C8E41DB01 BA51B0671C47F27A 39B82C6914CCEC38 606108ED45C61581 F700E555B0DDBFD3 2334EAD082F07B9E BE90E1833B14695A E04500BD3CD8BB69 DC2BA13F583FC25D AC1C807C7978B0DD 664D403AED08B204 3684A75D27E84814 569BCA06B7537FE4 7ABB6A52F62229BA E836AADBD75A79D6 86F8C842CC9840E3 E9224BD9381F3A34 51C99FED7511A01C 813A473A627F7191 0CFEB883052E4336 6CC1571715693625 728FE34C8E34D980 778CA6A073090384 B1D014DC8C57C1E1 923FA3D0054B70D1 162D1B408C6BD0B7 03B382F8D5ACE05C 0BA472705A43FE9D A452CE132404C751 4C5D526B455D31AF 8580DA8845E6B64F 7C585E800C6D4E53 F2C22A86D8EAD0DF 837EDDB1E4EE89EF 10C6DBD7D67A0C80 57843B25D070DCE6 F2C0F1D3BCF56ABB BE3A69B99101700B DCCCD029C1F8ACF5 A3E7CD758BCE7DFE 660AF755141751C0 7BD4F7064B958A50 79CDF559801151F8 37E9976DBF148048 312CE565A631AEAD 752FAEBD8B892173 8BA20B8A3B416577 5B7F2BD59F48F620 6AA8C017CA7415B2 8BF835FDF5A538E6 2F9B04B8E4C30743 1C63062E19370CBE 5906C4693E224297 FF4D0ED0D80ECD6F A93728719527F7E2 08CAF294EC0AF030 4A61070C78587D2E 755B7A6ED77320C2 12642AEFE6F895B0 9C16122693DBAF61 1F248EB92E4600B1 4D9580D6735AEF77 66F4862627D8A48A 3F948DD392B6E2C3
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308121206 (name+title). Key = MD5(password) = 9332fabefe1e5e6745e9f84b1e076bef, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 14a15e76-5067-53a0-a0f4-3a51df5b031a
  2 82eb4ab0-89fd-6f7e-aa93-8ab3db46719e
  3 14c646b0-a797-1e7b-bdae-384f6314c046
  4 db766945-8601-80eb-a719-1db8fa292c72
  5 2ef2ad6f-ca15-160e-8cab-8dc07fedac95
  6 9ab84389-50cb-3df3-9ad5-2c5e467d3006
  7 23230936-4943-6cf5-b545-8944210a06e8
  8 fbd51d9e-62fc-404a-96a9-9267f6867881
  9 d67536cf-9758-65e3-93ed-e07f91373eda
 10 0519e4b5-d90d-8c2b-afad-9364071f9301
 11 232eedc9-ae8b-060d-b3e0-72bcd2b73862
 12 076b36da-280c-4eef-80dc-6613ece44e70
 13 ad4aee5c-7349-7c76-95ad-18080d7b9fbd
 14 fabb55a5-50f6-0588-b3c0-049a3127a0da
 15 86e253c5-9afa-827a-945f-6fe01e85b2ab
 16 b17c4d99-44a3-2707-9b3f-e0c4bafc7d50
 17 058a2860-477e-48a9-b6ac-1fbbffad3c3b
 18 d08a41d2-19d8-31e9-a7e7-fe0ab1d41d69
 19 ce154559-315c-48ca-ab92-2de11ed7392a
 20 58fef773-bb5e-39a6-a663-499e6fc0840a
 21 509e9526-e2b3-1690-b9d9-1926cf9b0fcf
 22 625d028a-6ced-88d0-8ab3-0d54ba91a5dc
 23 a13f2163-9021-68b8-906a-37df01a84028
 24 21e809bd-bb9c-572e-b06c-afaa3aa55373
 25 a1f51cdc-43ce-470c-9576-6ee7fa08df9d
 26 dd40aadb-f423-2837-886d-3a319c5c4949
 27 128e3369-1e67-88a3-9157-5ff082a636e6
 28 e0cfbf7a-f521-7252-b65e-d0ec195c6406
 29 71522137-4629-74bd-9c68-9833bcf59aed
 30 c306f522-e087-3a39-88e5-fcd563d32ace
 31 a2d14633-a933-0a78-a292-a371088bdff3
 32 e2798d70-3c47-64b8-b542-6c75e22111ae

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 56181364680470824343186542877306. Exactly this sequence comes out of new Random(620).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 52 of Run 50 (seed 2,278,890): new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs