A858DE45F56D9BC9 archive

201309040659 1louyh

explained decrypted filler

seed 47

Metadata

Post ID
1louyh
Title
201309040659 → 2013-09-04 06:59 on A858's clock
Posted (UTC)
2013-09-04 02:59:55
Timezone
UTC+4 · title 06:59 against posted 02:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309040659) = d0f92039712ff73a79a209421548a903 (name+title)
GUIDs
28
Filler GUID seed
new Random(47).Next(9) ✓ verified
Run
Run 52 (seed 1,430,705,843) (seed)
Draw
34 · predicted N = 28 ✓
Machine boot
2013-08-14 07:34–10:34 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
8 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

ADDBCB37CE36AC77 29B7F418670A083D 865DBEA5DEEFB06C 7B6B5B5C48BF5B70 E9E7AA3CAEE2BB5C BA271C8A4A8B4FCC DA69F6A74C3E94EF D48F56B4FFEDF2F6 16160F65FE4B2E8C 571A1476D40FAA08 9B2D31464E21F2FF BCD87BF2B3431F73 1EAA2E1707501FE6 1B3EB8323A10CDD4 8CD83E2FC4BC4B2C A01E0D334B835B5C 1F556766272E0E85 DCDCE9EDA4CE0C9D E4A284EF504177D4 7FDEA1B73391CCAE 285774889E404DF1 12BAF1322E804D8B 6357ED422BF6FC9B DA7F4E326BE40A56 E371315938BDC9AF 09EBA138DEEBF383 6EB25B5FE266B393 E5BBACCCD2FE4EEB 480531074303FF5A CD0F78BC10CE9AD4 96474629F4BAD8A8 15D667C1E6CC4922 A13CB3E1BB7C56C0 FFCE5E3F7380DF5C A24E9C7DBEF67CCE 683928899334ED9B 2FAA857D5B1176B4 A3CA57E082EF4DCA 6BA2CCBA8EDE3D07 CF5F3914E40515CD 0472E4A79A45157B A2F624271C8EAC2A 5600469033F11C3A BB51F3DA63A4E76C 43B67E3915DF06DF 4EF17440CC7D0187 B44550705DFF0F71 994DDDE1190BEE46 83A709DA6A320FEB 32364E5206F5D8BB 000A20B5A4546CAD 2A76168FB5EA61AF 400727076872D284 5DB55A181B510D7C 484EB22CD59AAD80 99D5979E920A0772 9A3019E7D0D0E923 4641F8F3849BE712 D5BEA9A665ACDA87 3F0D61404D8545DF 38435BF742B58A9C 7A7B91FE5B10D96E C6F601952EB58887 3566912D36F09E85 EC057813F42C2291 BD9D05A3C342A5FC 7FFBFB8A8FEBDFCB 70709F1CDD4CEA9A 0F67EBA5A585D6DE C1D1877A6ACBA2DA C990A825EFF807FE C5361E32FCB59192 0AF3CA901613B59E B24C159714E7FF64 88CAC80E09AEA88A 9D03425E030138C5 1B6598C0A7B9908D B0172F21E82232E9 E32AD32E3FE055B6 585DF66E73F0F7DD C4040DCAE04BB036 995054E4797FFE3B 9D3D41480BCF4BFE 6BC18B6AC8FC8181 239876A2ECD49566 9F1D0CE8F17A20A9 CDAEB9ED15D47527 57CDC1BEE5BCF647 E68E9E90F5CE7C58 EBEA3404504D6FB7 5026E95F8E7A1743 AB31E5F9C23FE6D6 F3F0381507B3B468 3732E7919A540538 EC4A78F82225A2A9 BA3C5177B2C61FA0 6A1011E775CB1C86 F613CDAA3489B144 E52E83E0C32775F3 79E98733B9B0F0F2 FE9D88F4ED6B5684 5365A71AD10FDC6B EA01D2294B349967 0D963E71BBF5F462 65AF3A12C7FFD319 973A11622DCD101F DC36A5248343476A 4C047B8B41887127 985BF810CD03373C 4BE8B296C85CC282 9C8041FF4851D5E9 288FCC26AB16EA67 E6DCAFB283E8DCE3
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309040659 (name+title). Key = MD5(password) = d0f92039712ff73a79a209421548a903, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 19a8b1ba-fc3e-2c0e-9500-4814e2f1586f
  2 639c18c2-d84a-58f6-b6d3-47425c79b44a
  3 13fad024-0746-51b8-9c36-4f9db4df30f3
  4 134c79e5-a8d3-50b3-87ae-81aab84d333f
  5 2f1e8715-4f32-37a4-a8ec-41cf14a8efa7
  6 7580d1ce-dbf6-584e-9690-2946f6cdd27e
  7 4bd5678e-1d79-89e9-af9d-b49154c7c527
  8 a372ff9a-a95c-0ef4-a9d5-1f545116d6d2
  9 810e8612-468f-7fad-88ad-4a2ba4d85a94
 10 3e4c8295-b04a-5afa-8d7d-3036bf2e16ca
 11 109a74ce-8aba-83c8-ad6c-71ff87a4ed85
 12 a63b5bca-b4a9-1c4e-99d5-d864b2eb81f7
 13 cac979a5-0802-80a9-8e1c-4b8cf92672c6
 14 2477d119-dba0-86a5-8462-56ab01376763
 15 508c6562-ad0f-7100-94eb-6fc5a7eb556a
 16 c0eaae0b-e3b8-3907-b2ef-ba8102403dd6
 17 e9bd5794-e267-56fd-8f3d-cb01d78936a5
 18 3ee35188-fb5a-1f07-880c-03fd8f09ca38
 19 34f9eaee-a132-85ce-a99f-de6b44ce7b34
 20 dde0d290-cb3a-43d4-aaa6-3a7eccfff854
 21 24db9f5c-f348-099a-8dca-c2aca58b9789
 22 9db6d0b7-b195-3b5d-879b-5d287d8aef1b
 23 0ccd4974-9e17-8d08-a723-6c78915e8eb6
 24 69ab069c-afa2-46bd-8a6c-8b3d895b568d
 25 47d62385-a417-2bad-adcd-793785a5fc5c
 26 5eac9c85-d644-6a05-a7c7-02a4ca492ae9
 27 923c1cbb-9d5e-34f3-b602-4bab9b01becf
 28 1317740f-88d9-796e-a3b6-b0d05e287d39

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2555358075818873518403842637. Exactly this sequence comes out of new Random(47).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 34 of Run 52 (seed 1,430,705,843): new Random(1430705843), 4·Next(1,12) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-14 07:34–10:34).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs