A858DE45F56D9BC9 archive

201309030359 1llz65

explained decrypted filler

seed 436

Metadata

Post ID
1llz65
Title
201309030359 → 2013-09-03 03:59 on A858's clock
Posted (UTC)
2013-09-02 23:59:56
Timezone
UTC+4 · title 03:59 against posted 23:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309030359) = 8aeec5779701caca030351612fad97d5 (name+title)
GUIDs
32
Filler GUID seed
new Random(436).Next(9) ✓ verified
Run
Run 52 (seed 1,430,705,843) (seed)
Draw
25 · predicted N = 32 ✓
Machine boot
2013-08-14 07:34–10:34 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

C387F357EB022E79 2A541D9BC4359D3D 767287C2D55E33DB 03535AE67994564A 5FDB998B215282E4 3F05A21FF6893FD4 A259DCF065FBEC5B C747FAF9E0140357 B2C735F7107400EA 9A4D8884221FF807 81ABBD700717732B D4125685E1A8D7E5 9BB862BA46C3EAC0 157D4CC17BBDE221 3BAF98B7158C46FB 1A328152F73C183F A144912388B49D07 EEAC280A97DE571F 30F67B22554EFD74 F478DBB49DC34686 07A685128139F264 C612523F78F1A45B D453FE5452AF10CF 13458A2CF462E057 AA316CC2670D4EE0 357564BC8006684B 4983E5CD3674970A 072D463ED1E89D38 AC07FBF91DCF643E 8BAD29D698B7FD06 B8677D12C7585D17 E1CE2746B8C375A7 8F6BD32306B05401 49207C0C53AEFF91 3BD1709DB15A52DE 42EEEF4091ACE142 BEA693E4BF1AFAEE 0807E7CAB40BA589 09A501C8CB6A7E87 38C9BC8B9242E4D6 E5CE3336937D1EDC 04AF73FC2BAE7B91 D04632739B2A77B7 17196E4F62B0C233 61F53F4484104525 0E077F96D7911EA6 666F81094FE0E2B3 37F64A03A0227D28 8C42845296D3DDCA FAD86541100E02D6 320523C207668520 C41AFA978F4C6775 8B034955FDAFFA47 E23D7F0850607376 4F14EF71EE801FF2 A2AD929243109950 C4467C7C10B3D218 A36B252ABECD3A7E 944C4465D1192252 115F7ABE30D7D36B FC934D43473F2D0D 1468555E932111AD 9424703C30D098B7 88EE36DDE11105FC DFCE7F8CDEF253E1 62493C612A9EF75F B2635DF86FCEDA16 252A991AEC7D3330 06CC916191AE86F0 CF8C544BA584B6A9 55F71C7FBD0599F1 D9E6DBD2C31D75FD F8566D0074533672 480BCF9C63EAFF17 1BC60F14CE63891D 4C78F7462DA041F1 48951437C7823FAD 3AE9E516FAF80CFB E9C62F81B57BCD4D DC0C97C42F08106A B1D622161830472F 1BA99F289EF995CE B57FDFB529CCACA2 6473CD5E8649F165 74AD6A2AE3A0EC53 C399FCEE44F9D3E2 CD2E54984674AFD7 B8992BACA7B0C188 00AE0D3DBCF2A1DF C85D6E83B533FD19 F5836EC5E12D5214 DF22FA0A62D1BB8B 69942CA06D4ADBA6 9D82474C22AC8D77 B199A71BBDF27B2B 557FDC0D14E16003 EA851A750430055A A2060AF1981CBC78 DF2169BCCB78DDFB 32C27701877DD3B8 E116DEEA12478170 AAA8B7C3DE2F0FFE 3E4CD1A97BB14B42 8584255910BB6773 41C1533A6C084A2B 11D8F133EAB87910 5F70E04E7F0CB513 551452240EF9D29E 17D7EE870EB158A2 13B9D4557398F0F8 4EFA9DCC5ADDC3FD BD7A1DAFC8E5456F 7B48D06BD079A658 1046C481197282FC C848523CA152B206 B038414DCDA03AD7 B5CF8D6B0C77D915 95995CA0A900A3EE 4330793C22776444 FDBA31DB1B7BAE2A F2137EA735ABEFCC CE56C1C8FF189034 F3E008B7A014D5B9 04D40F2254C07AFD C56A8628D1AAB2B7 5A7CFB38A256358A B1E42BADBEAD7483 AAEBF3BDC38EBC6B 0A827D927B760F08
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309030359 (name+title). Key = MD5(password) = 8aeec5779701caca030351612fad97d5, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 10fd0f00-3c7d-4061-962f-b11262c30ffc
  2 d38a0d10-6f5e-6bd5-a563-0ae44f050cfa
  3 35df2a70-fe72-4f32-97fe-f873f0c09afb
  4 fbbfed13-bcc9-53df-a26b-b7dee38c365f
  5 96aae50d-75a3-0e0d-a147-d0ef01e3fa44
  6 4c4f3fc6-baf1-5210-abfe-9320bc1d0f24
  7 27967c0c-e3f5-20ee-b98e-40ea2428a390
  8 4ab93ac5-c8f7-1968-acd1-c8fac26a138c
  9 cf60973f-3b28-8cf0-9e28-48c7404d3577
 10 536cd455-ac32-0b07-a998-61cb59961dbc
 11 40b91220-cba7-4afc-b544-32ff9affe90c
 12 301288a5-2ab4-7b46-8d52-254e94d0cfe0
 13 9e387a32-953e-3939-83df-b8069a4aed1c
 14 3b74e9ed-e7f0-266e-9502-26bfcacb76de
 15 6745fc0e-9632-1a6a-ae4c-3013f2b41890
 16 eda478dc-8ffb-22df-8cb9-84dbd3af554a
 17 a300c9fa-f2ac-1241-9d0f-f9d43d08922f
 18 215879d5-ef84-2262-ae4c-15645cd15eb0
 19 3fa3fe42-e080-453e-a1bf-da96317e615b
 20 4da6e6b4-dd84-111d-980b-d5ab027bae81
 21 4a019365-912d-64ec-b7a9-89bed79ee956
 22 99e7c87e-14d0-7e76-9917-98dc9497ccf0
 23 33b52a9a-c316-6c37-b4a2-be1dbe99c75f
 24 def07eee-36fc-3e41-986b-a434c1754ea6
 25 8bef843c-82bf-3207-9fb2-09a47f6f4163
 26 96a47fac-d532-8cf8-9fc7-55543e29acf3
 27 45156316-d63f-7f39-a5f6-ea3710499b69
 28 660d80b8-c882-7669-9b36-041e8e615a41
 29 8e4f8ff4-2bf9-896f-a669-594baa6c55be
 30 a45425eb-9489-1d94-ac4e-0f82a1b4d978
 31 453be00e-a681-1ed5-9836-d0a055c38ec5
 32 28e6a8ce-c494-2fa2-b754-4b617e17a5af

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 46450521804732121241676338778112. Exactly this sequence comes out of new Random(436).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 25 of Run 52 (seed 1,430,705,843): new Random(1430705843), 4·Next(1,12) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-14 07:34–10:34).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs