A858DE45F56D9BC9 archive

201309060359 1ltj3p

explained decrypted filler

seed 663

Metadata

Post ID
1ltj3p
Title
201309060359 → 2013-09-06 03:59 on A858's clock
Posted (UTC)
2013-09-05 23:59:53
Timezone
UTC+4 · title 03:59 against posted 23:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309060359) = e5b618ba5249cbedb0f7d68d4d2de743 (name+title)
GUIDs
32
Filler GUID seed
new Random(663).Next(9) ✓ verified
Run
Run 52 (seed 1,430,705,843) (seed)
Draw
49 · predicted N = 32 ✓
Machine boot
2013-08-14 07:34–10:34 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 2
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

524A3B6B3CB8CCE3 87E0912BA12E9659 0D0A510D7CF93B73 1F490D5E6140E428 FB5A2B08D3F1AB61 0E3E58C1D8C5F8F0 6E72519B52C362F1 0263CEC749C24AB3 E3B5E8A586A7F0A5 44FFFE62FD2D25C6 E180145A20D61AA2 FBD8195FEBF7CBCE AEDC7D92422A0A4A AB1526B073999542 8B4B169DA980D990 F7B46C1CEE18EFF7 9E63E6B6F44D5344 8CF350427A573091 9C375937AC7F6236 E6880E00735FCB9A 3FFEEC3054D7E954 3ABE453BEF62C9B1 95DF5A55A700E040 EE5B7B4B9E749D07 5F3F62C9AFED80E8 A2489AEC4CF42362 84D00F55368D13C5 848C6C8A277561E7 A42FDDF23DA0A608 A1A8C59261DAF8BB E4800242E4ACD351 E5246DA8A8B48794 EF208E9C2C36188D D098A11E4FD1AF6F 810742464D8FBFE2 8391002E1FB1F6EB AF26BA3D8572A432 3C1620547210DDAA 3E4E3FB17CE503ED D856C499FF38C0E0 7C26AE18780F79FE 474F265A985734FC F6D75C6219A95964 B206E89CBEB6D623 E05EDCC1650535EE 366140838FEEA246 0117E1533DAF323A 58DD163C862E5817 883D9640AA8E416E B37A33C52DD6782E FCD29692A9E5C4B4 AAB60E7AEFD6E1F1 ACE541C505FE8847 A8A14CEC9053AA0C 7C54AF2C86E28872 EEECD09BA877518B EABEB677219BBBC0 B0FA06C31E7612BC 88B1B445D6962B99 CD569ABF1CBBBDCB 298811D70B8D7E55 A6DD05CA2C4FC227 6AA9B2CC1D2E0FDF 81939C7422884789 915470B9576289F3 EB24AD1EF811B85A 5EF2438804683EEE 6D0382584AA724B8 E0F60EFC4E4FD594 D81CD6DE53FCD46C 2A7F3D4B918A4722 566116CFBB9EB216 AF42369928B4A392 5B8E4A3E39D1A980 BA4A4EC55C3246F9 DF4BC27F2795F838 DD5B8BC05C39E296 0A8D8E0889F5BA78 DCD596298851754A BE73AF3F43DB563D 94440491F1F4E59D 3A96A97BF714D8E6 C6CBF7FF495D6431 110FE17BC975903E E8A935FEF7284467 080480165958E939 148354FD231C27C3 05770378AB034D35 85D441AACCCFDCFF 4F04F6AF8336A048 51274613C62E90EB 9C1D8BD15053354E 69776D7652F68262 E9B55A4B4CE9343B CF1BA0C54A21867C 33A3D322F5D57AF2 CF86D14321AC0B15 B1D9E86B88C45BFB EBC2D4FA517B653D 022FD55F38196EDF C5E337CDEDB52E32 8CD5F016A38B5B17 D0FC4D8AC2B95E68 0504B6CD42592E25 DC450AD650D6B09B EE158518EB2586C0 5B7419F154168E3D A14D19EF4FCA0898 8BAED71791956B6C B819A86B09598A9E 701D0A904A3E6C24 21FB247B27724800 94BD4641D5B11DEC A7A907B608BA3738 429BC023022FA3C0 0B6BF3AFAE68C8B0 D1AB27F43F9F5380 9E076DC4D0D66A7D 420C424C58FF43C6 80DDD68E7CE6C032 D12BE5A20A7179A6 82D5383A36CE39F3 770DABD2C453284F EDEE10CA3D905CEF 0ED9F6A11A9D3D0C B24C00652E19F8D2 D1E14F67058B3805 D188C58C1E33BA40 4BA5E977FDE2BD01
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309060359 (name+title). Key = MD5(password) = e5b618ba5249cbedb0f7d68d4d2de743, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 8ce3e27f-77b5-0985-8185-f65aa61fc9ff
  2 afdac5cf-6963-3a61-808c-2bd60a30163f
  3 53c7b2c5-8331-10e0-87cd-0b099d400742
  4 f23162b1-487e-0f30-9e45-27e9d5211b24
  5 d8062b6e-3de2-4bed-affd-681f896d5433
  6 71d2bc9f-89e0-8164-a44b-bf4cee7b1570
  7 9d2f92ab-8778-86a7-933a-42679385c45b
  8 aa56dc7e-47d0-0f54-8168-4b5287ee02cd
  9 c1b2d108-091b-0fe8-9338-f879909495ae
 10 c7cb62a1-2629-6bfd-b3f9-e47819a0e6de
 11 0303ff5b-e6d6-6da2-a200-099e7e10b0a9
 12 98a9161c-69c3-058a-9a10-42edd198e838
 13 40cc7271-8be0-3252-9c73-3391be41a1e7
 14 42744a9d-f386-388c-a174-019590946dd1
 15 e526522a-5b60-0293-9a14-579d6e66d630
 16 2769c4d4-f048-08e2-a91d-1f34d5d8726b
 17 7a3c20a1-f4f1-590f-b3ad-72173ecae409
 18 030ba96c-7ac6-0609-b137-25dc48cce71d
 19 98e3d891-478f-500f-8f3a-10384250daa8
 20 cb233aa7-c755-07c7-9e63-54d7ac804e9e
 21 1eb46048-69ec-818d-9ed6-896a89155b9f
 22 dd4cef9e-8483-4069-a128-dad97eda5ab3
 23 f359669f-6dca-0e69-ac9e-55c3b6814e03
 24 5a502d0d-01a5-5f30-b814-c2443ce14161
 25 fe13d15b-1af3-6874-8bc0-71946ad1572e
 26 0ef12dfe-2e4b-8713-a2bd-a95e6a996951
 27 5952eb4c-1b1d-828d-90de-9e7b16df5940
 28 97298672-259f-4969-b36c-907e9a655ec4
 29 2b1ceb89-0377-652d-9c57-09522bacc32d
 30 9fba0a01-1364-016d-afb8-134bfceb31d0
 31 f3f6b55d-60e6-8fa5-86c4-8f015a1ce7c0
 32 00733831-2bae-0cf5-89cc-09aaa2546bae

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 03104880066033005050840568846080. Exactly this sequence comes out of new Random(663).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 49 of Run 52 (seed 1,430,705,843): new Random(1430705843), 4·Next(1,12) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-14 07:34–10:34).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs