A858DE45F56D9BC9 archive

201308240629 1kzbv7

explained decrypted filler

seed 321

Metadata

Post ID
1kzbv7
Title
201308240629 → 2013-08-24 06:29 on A858's clock
Posted (UTC)
2013-08-24 01:59:58
Timezone
UTC+4:30 · title 06:29 against posted 01:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308240629) = 2c524caa2f189fddde436d988d142fd7 (name+title)
GUIDs
36
Filler GUID seed
new Random(321).Next(9) ✓ verified
Run
Run 51 (seed 714,271,718) (seed)
Draw
4 · predicted N = 36 ✓
Machine boot
2013-08-13 23:35–10:35 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

EB0420AE3E8CA27F 96161746D7A43AB9 C37F90CAE8BFA19D 174304D0B0088A95 8FAF6AA246AA8613 7A3F16C0AD845B6D F60BBE81D91550F0 60278A1A8EFFF0A8 A49DAD50DA79130E 73D49F4768B4DC8F 0AC14524E7ABD6EA 755AE687849B878C 54E7FF38226EDE94 3AC697126761FB97 E0B83C7BE6351A4A 4304AFD30098E07B 9CA6D3F3005D5AA3 E50CA5B936FAEDB4 58717CE17BD31EAE 2852896426DB5B58 9D9154213E0A1082 98BEC28E54829D71 4DA355B803ACA03A 4215F25AF1C6592C D66A1B59B545732B D1A89112D1A45525 1C539ED5C4D7EB6C F1242549208F44EF 195123338340EEE5 61AF45B083E07A8A D10605322F81FCD9 393E26208E6D1B20 A8215C5721E82959 797016B38FE66E13 B0B3894C4655F836 6219F11925939E8D 28AE9BD4197EEB9F 0BBA8D0DC1EB4F75 8554E2819E75C5DB 7DBDBD58ABAF88A8 B13535F3E8C67C2E 03F8F10164381E69 A23776169771594E 4220879BC0FE0B36 664507147B4FE243 4FAAB30193BE6844 8626749C049D1A4A 9979BE412A38832A 61CBB1C8599D0F1F 6A163C01D91C51D8 5A3368729C09DD1E 86157A05D0477DCA E694314972287401 75419711B356C94E 1CBD874FD3CD2B65 903FD1345B58AC6F 8A77728620E6D155 F84B1D0B2679E8F3 F0AFE1B291776ACB BF988345D68233BD 641E15324D5DA195 65E1817677F87E5D 19FC092FD246535B 5429B2F95307288F 794CC465D498463F 69C9FAC08B65D83D FB052369927D2C8A 91D315B82577ADDF 4835148A7D5AA655 A8BD6EDB492AB1A8 D11AA4BCB6A94623 85538DBCD324E7E7 830756CEF0D94BCB E8D431FDB8A088F7 4A080308B875BD5B 3E2160301F78C5CC F7440C825142F1AF 9D3FE0B01E69C39C 4628A2C64D012DFC 38AA5A4C2859E947 C6C6041A83AB6FD5 FE889D898444D766 2F19E8C6F77D110A 2D7B0BA5BA07F8BF 7E3F208326DD7A10 F62BC2BE9F4C4757 42851F5B8D252C0F A199E039B2CA841C 21E51041FE836222 5940AF86B0F8DADF 54AEBD5D22430C30 9D997C691F6E9B02 689932A9DE0C5929 6A4E5CD297CF8449 38D9984436B0718C 1251CFFB2A8C8689 0486468D92EB3681 1E5E88ACC4B7CC0D 05B98453B5A906D6 D7FE484CDB10C363 66271B4F0ABD9D9A 53ACB35074FB05DC B13E42D1942476A4 21BB78531A7916C1 00A5D8E557C9044F 95C0C687B2FA37AE FA04B59527CD731A 42FB941E6436BC4D 08E6C77C1C67388E 07BC859EB4A41B43 9708D2277131D60A 238E9F00506896F3 9D54C0F3B6BA0F80 7ADB5FA13E826FE2 09B987C3C9902BA5 4483F899F12CB3EE 622155189B7E7932 67E5E25826DD0960 BFB0ED320DF03CF7 D893C56A8FC76A67 88AB24B7E29EC957 BD3A5536E3A0C4DB 9823EA4DFD6EDCC3 4F381CE84A105E13 01F8D30A9F3C8241 F78A250000D556BB BE91FB3122EC6D00 E462A233195E89CC 7E804ED488C610D9 9CF30DE42A6DA851 016E029C13D5D2EA 117438F122C24B82 E677FBA8C8F6880B F44C3F74EE26ADD1 0060B80B22DAD598 8EAC0698BB53BB0D ACFD2F951CC935B5 61E08CE382EDF754 B9B9666CE0FA5086 4328381B4E268881 3EC96FEAE15DAEF4 A3837F2D5436D3E8 D2831D56C6563108 4559C184083D778E 590F21BE3F6B2F4A
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308240629 (name+title). Key = MD5(password) = 2c524caa2f189fddde436d988d142fd7, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 197b4f19-a618-3b0c-bd03-1386e8db2699
  2 30a90f56-3eee-0907-b1a7-430cd9a74db3
  3 8501b2b5-5424-1ae4-8827-76cb8be42cfa
  4 96033e1b-620d-0582-abf5-f49da8ef1a91
  5 14efb88f-f187-1ccc-a9e1-64bb70291cc4
  6 6037e0b1-f3a6-0ef9-b62f-983de688fe6c
  7 3095e6af-b2d6-61e6-901a-828a71179fdd
  8 015d7eb9-34d5-45a0-baab-ffe179c0373a
  9 b12f63f2-b2db-62ac-ac2f-0abc7ec4d8d5
 10 2431fc2b-7322-5464-abc2-b79b34a12cce
 11 cbfedb70-31f0-7866-a9a2-09f5b6de2fb5
 12 baac8300-7409-0296-8b1a-9746a00dd5ee
 13 72ad7201-e6e0-200d-a11b-998d53ee8635
 14 6dd97852-3467-443c-8560-3749f5b99132
 15 2212693a-5f08-6104-8d8a-9bbcf37a6471
 16 0c2bdf98-ff48-4edf-a445-e6b64ef71877
 17 2da56cd7-3589-7756-bc7d-561414609e24
 18 72bbfff1-d70f-0154-a73a-58450421508f
 19 4ed3162e-aa3b-3c2d-8053-66951967d08d
 20 75ac2bcb-9ce6-518e-9cb1-ce5c043c6523
 21 f0bd58f8-4c51-4222-9bb5-4931f91f37bf
 22 91a05076-3233-5feb-8bd7-d2d2974e73e1
 23 a06d085e-a437-21dc-9751-a56d02cc640c
 24 858c8a34-1530-16f4-83cd-024f4531acd8
 25 90c2cf46-986b-17dd-aecc-7ec9cb4ea6e4
 26 acdf1f89-f3fa-851e-9491-13a9155d3d0e
 27 fccb921b-cc3e-84d7-b427-ab1cfe256333
 28 3afb74ae-ef10-540c-bed5-856054351dd8
 29 c33dcf67-e6ab-1bf4-b246-006e55e22c76
 30 67ea7374-cbad-566f-a9aa-16f7531c6957
 31 8439ac52-74c5-6f44-9d10-65370fe3a854
 32 85cc2753-861c-01f1-b76f-de51f61e28ca
 33 1f51de31-56c1-32e2-ae39-3a43438843c3
 34 e78e2775-252b-0f53-8fd0-a77aa93713df
 35 f0a3f396-53de-6dd0-89ec-ddfaae1b7567
 36 0b0a6b9c-614a-68e6-afa0-0653c975a180

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 301010646570246470354521188515603066. Exactly this sequence comes out of new Random(321).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 4 of Run 51 (seed 714,271,718): new Random(714271718), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-13 23:35–10:35).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs