A858DE45F56D9BC9 archive

201308250429 1l12ye

explained decrypted filler

seed 108

Metadata

Post ID
1l12ye
Title
201308250429 → 2013-08-25 04:29 on A858's clock
Posted (UTC)
2013-08-24 23:59:57
Timezone
UTC+4:30 · title 04:29 against posted 23:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308250429) = dcc260ff637fad52233fcdd4d447f6f0 (name+title)
GUIDs
32
Filler GUID seed
new Random(108).Next(9) ✓ verified
Run
Run 51 (seed 714,271,718) (seed)
Draw
6 · predicted N = 32 ✓
Machine boot
2013-08-13 23:35–10:35 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
10 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

B1AF33CC73DB4178 B5BEA3A64B9B72A3 450EA1BB0F506321 E9AD17C8CB3A69C5 DA3BA5B3A0AE4766 1D9AB5C255D8D4EC 7930CAA490E8FF59 8FB852292DC58EA5 3A840E7AC1BE6BD9 ABE22DF91A37C110 05824BAA0A8C92ED D16470B2970F73AB 29BDA12EFD7F5A39 E1F145FD803B089B D1B231AE33FB898A 4B6AF65CD5A9F5F5 A567591DE500F00E 40D8FACAC3855A59 5C8492C4FEE7A0A4 7DC78BF8578F8807 C7A47BD70161456C 350627386F8F0C85 F49BF477DAF81055 BC3DFFD12AA15B19 666A6475B1F3CE61 0DEF6378628214A5 4C60E9BF7831FD63 2B71BD7E9D40C271 47B68F4046E4B4D0 AFFE69FA82EE1964 A08F98E7829288B2 4F262C0E6DC8A87A E2A259DCE41BDF34 4D8C741C3B4B4302 CF4E18DF5BA99A80 7154DFDDFED4A8A0 4A22C9F507333A01 33353EBCFAD21A31 BBB743D0CCAE56A6 13C8A272AA721677 C1C565BA2DBB59A1 F3E801C0593575A2 7FE7028A0D4BE158 3C76A917B70A29C2 66717F89AAF31F10 B1B233E4DC70FE6A 0E9D4FBC9897D908 9819E9CEA1B98496 71A3FA3608AFD5D5 044C4B88D3B292CA 7838E38F0BE150B8 D2D64D346E2A8A08 F7BB7BAE0D1A9C41 0B5D8668520ADBA9 9CA46903AC55510F AC8FF3AEE354CE00 A661289653E6AE9F 435A2A428F8D5214 2F00D2F792D9907B 871A6B9D75746591 E01CAEB1A0F5A9CA 0D640EA54E21CD03 0E910C6D013A6011 AA1D077263573C5A D148CDFE590057AC 5B01328016BC6FBC A36D460D40BCBDDF AA7D197D61E6D9D8 5FDD3C7370DD89F7 F448FD161F27F377 9274145D96120CF8 F05B11A1F7217A1F AC0741EFEC48C289 CE57B47B398470EC FCB2B4EF975DB3A9 A44BA3D9D21F5B9C 4518CE9E55B22623 869F8D61F19EC046 139C7D41C33893AA FDC2E0A3FEE24C32 1E3E112115BCA156 9822A3095CCC111C 0923D930B81E3FD0 B90299DF76852F6C F94798E5CE4AE15A 8151ECDF43B71172 CFA88B9F30EFDE97 08A5043995CC4DAB 9DF34898BB32AD5C A061D0D8CF10E734 62534AC26F917759 6A5A40DC823D5166 669D683F7B490CAC B4E293F55600F6C1 AAF426F435F66BFE F5678DB319B4F75A 6F2496CEA776AD4B A8B3086ACF35EEA9 C81E48D18FCA11E9 B92502686DDD51AB BD91B06217EBAF06 1678E918E276AA12 320384076F39CED9 CFFDEE1B7A1CA205 79463599F1D1618B 2BF2E9D14F36CDE0 0675CBEA8968741D 3CC9FBFB322345BB 79EE9D55F8BBD781 5E3CB6DC357DBCF4 9140AE684769FD80 5FB7509188A1DC56 B1841C79AF6B2118 AA47FC2B13D31910 15C36413D5D9D363 501F7E98316FB2AA 40A6EC1664149586 9A8724EF5713BF4A 19ACB6A9219DBDEB 3DA2173376877530 743FF60530479698 449679D3CCCC545E 496828C8D8AB64B8 75FAA337148036E3 0EA6F59FEDAE11B3 B29F1AD9888D1AA7 3F69B82E916EF405 EDBA488BEA7F2966 6CE521F2D79896CB
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308250429 (name+title). Key = MD5(password) = dcc260ff637fad52233fcdd4d447f6f0, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c26254cb-27f3-190f-a0ef-c9a3dda9b7b9
  2 9f1cf79c-aae9-467b-94d5-d0f29e3e6c24
  3 23c0d8e9-fbf9-275b-aa73-0e9e62636266
  4 dda54a09-9b76-5704-bfe7-a6a3504d9033
  5 4b70d282-03ab-8a37-bf5d-1942b82e2134
  6 ec10cf63-77d4-87d1-93fe-37a6fcd3d5f5
  7 b9d67bfc-590e-27c5-9c89-a5e763980d88
  8 897753c9-8291-5839-987c-9494e6d2bf28
  9 9ae7feb1-0f90-3851-90ed-19114e01b5bf
 10 458d454f-0e8b-0cf7-9f99-82ba2a3aa1ee
 11 30c9b3b4-173a-79eb-bc4a-fbe296f75f2c
 12 ccd34d16-0500-768c-b5eb-686ccbd201e1
 13 0229408b-a9db-792f-bad8-dc525dd4df14
 14 0c2b4f5f-9312-529b-8de5-6604a1bbf58f
 15 0e35fa79-fea8-5d9d-b032-76912c5a610e
 16 ab6c0350-12ce-4366-9ca5-41f306cc2bcf
 17 c5b9927c-9317-200a-b945-3ff7cbe08408
 18 f1dfffca-5888-878c-9102-00240ccfaa3e
 19 ee5159ec-2135-5cb7-9926-2147e46d7131
 20 9fe80b38-121f-1297-9cb5-1f8e6158ce1c
 21 1b7d650e-3615-13ad-b582-7a61a13f04bc
 22 cd55dc96-015a-326f-875a-a38ed78b037b
 23 ccff4cb0-094e-21be-a740-f1768ce62b10
 24 880e5de9-a9b3-6eaa-aa03-5cdb2e2f0ecc
 25 66b54d05-e31b-2c0b-b6d5-28194c91361e
 26 ffa066b2-f357-86e5-a542-451e6dc1ac53
 27 3a17e489-944e-759f-a095-ae230d03e491
 28 077b8924-89e8-5831-a3a6-3c2c7fd0620e
 29 9a8083e4-bbc2-3581-84ce-c71429385056
 30 9a8a6b14-010a-03aa-8daf-86e1370a2b9f
 31 427c6150-2d8e-0a12-b5be-f306b368a502
 32 07c1152c-962c-85da-973b-c6be94682e04

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 14258825307775542851132628753008. Exactly this sequence comes out of new Random(108).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 6 of Run 51 (seed 714,271,718): new Random(714271718), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-13 23:35–10:35).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs