A858DE45F56D9BC9 archive

201309101859 1m3w9v

explained decrypted filler

seed 411

Metadata

Post ID
1m3w9v
Title
201309101859 → 2013-09-10 18:59 on A858's clock
Posted (UTC)
2013-09-10 14:59:47
Timezone
UTC+4 · title 18:59 against posted 14:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309101859) = 2dcfefbc473c7e2fed5109d27586fc23 (name+title)
GUIDs
32
Filler GUID seed
new Random(411).Next(9) ✓ verified
Run
Run 52 (seed 1,430,705,843) (seed)
Draw
86 · predicted N = 32 ✓
Machine boot
2013-08-14 07:34–10:34 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
10 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

B85A3D09A6FBADF7 F6B4E9B75DED745E 1037351A660BF2EA 4FC443539B66E6DD 8E48E208343DED5B DE229D990FBAC6C1 6A1D2FA855FB910B 0A1F237C9469F0ED 52E0EF0CEB78F186 C384EEDF2C2B2199 7D9F01DBB2336E4D 90EC0E3E0ABCC811 AEFFE9DD248EFF7D C0935FACA403708E 2F9FB6080A2AB5E7 0B029298378C8E27 155B8823BE14AC06 5F0D809FDE843B36 84D94033C287B32D 5201F7312760AB5E 0A19BEE27BD8AEB3 6BCDC675863F4B81 FE99D53075B1F6CA 4975F8132E8A7778 3142EA7AC53910A5 7A6AAC133B4FF66C 85EB415AE23A4BBC 58320FA2696624EA 1A4E0917DF66DA9A 3F2CE5D710620511 18E3D5C5403369D5 D44D3F7F3E7188C1 30641BB2923A99B2 C03CDCA27CEC79AB D729736F134B3A46 7E2DAF3281BD7BFF 4FAC9C7FDF45F999 EB1AE05621403CED 3DBDAD478FC26CF6 8BD6602E3F1E699C 05951E73463CBBB1 99007A16CF01CC3B EFCA9EA28E809335 1A667AA191BB596D 3BF2EEBAA664E97B 23D50798F73DEF06 85E66B6D50E8C308 7B54D2AB9D4F8D01 305B9CDB7FAABA8E FA19EE68996793A3 C476A3AB8A9B3F36 C8A67690ECE95C49 CC9D55E41B14B823 75547367DAA25770 A5B57697B9585B57 C4AEDB284CB3FCB5 E2BE98895EF5BE03 DC0F329817F33ACB D6EB9CE8AA7E8713 171B999459423427 4EC39DE52BC3C634 6AFF57AA15707E92 6C11E493EB004E30 A5E4B3B9D99FDD0F EAD85D54310E7AC6 D609658D3EF73425 A73582A5D53D1F2C 787992DB3BA73913 21ADF38F13AA82B9 B52FCBE92AAC8240 A1A04BF638E388B5 49783A6EB3B7232B 7A87D0D125293F61 7EBF66C7993E00E1 61B69967BE8E253E E946A7CA6BA7AAAB D781928AE2CC6E8D 047C4FE8E7D2E8C7 0507451817256FE9 277F35BB71495CCF BB4DD48CB033B573 8A2F51EFF96A2CBD 3760ACE90B55A220 5FC2CD93BB113906 BF9E11EA4CDC162F 9A920AEB589B1382 A79F066FFF416AA6 0E94865F05A62E4A 78088EBAB8921CC2 25742C47ECBB720D 03FCFB3B5524FD83 7A3113E7F5EBF2BC AB2555D550D23AEC 2E5D3E16B248CE3F 3E8ADFF219B553D1 98268C5575C4CEE2 7EEC3377272E52D3 40DD77BD2A4DA2A2 76A71772BD2C5736 6F0F57B46052204A DB1BCC8D1B8541EF 757B1E109D188796 7813D2319D8D1BED A62669945E0F7780 1813DEA27647DF5D B211ED00E59310EB 0ED031CA3045F00D 07B98E5A37DDE841 40EE6AD567C54BC0 CF6F37F6032BE35E 340F36BE0CCD771C 5C0FA896EFE2D38B F295C1EEE2F7D5F8 F50CACDC16DAC562 9320C72D5824E4F5 EFCA90E900CBFE88 5C20C51E281616D8 60F678ADC0F4CAFA 6E2578A3A05E3471 61C3FF67A88C9186 5B9B7B40CB843AC7 70E024EE44DA3975 13162BF2F89D1717 5E394056330BF1E9 F8E848AF56673366 2E32430FB6C0E3BA 597A5EFFB356C68D 00FB75A8FB902441 27E820DA27D9B35F
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309101859 (name+title). Key = MD5(password) = 2dcfefbc473c7e2fed5109d27586fc23, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e13968b8-ccc2-3227-82a2-2f8e533be29a
  2 3bc3e769-967b-3ed8-b012-c367c3494db7
  3 b76aafe6-1de9-0105-b075-a5620faed51a
  4 cc537869-dceb-2da3-9abc-524bf7522161
  5 d22672a7-45d6-655b-a874-32b1919b1b91
  6 be1a5434-be0c-61c4-84ae-2825179bd3b0
  7 289020ed-f321-0bed-8b9f-c913cb4f2716
  8 486d1d9f-2667-56eb-8333-7ac06d7a71cd
  9 77c5ee29-f038-7fce-b35f-a70603c8c4a2
 10 4eeba311-e4fc-7067-b342-2d083414b144
 11 17e0a7ef-0ed2-0ed6-b203-cd889eab6c24
 12 a2309ce4-acb7-3345-a964-797c87e12ff5
 13 b7e34b2c-4f94-131c-93c7-4795aa4204d6
 14 487e9332-19ce-2c34-919d-4ba9921f2be1
 15 7b8babe0-779f-645f-bf05-f56d2bb1ca87
 16 76ff1bee-ac88-6ce5-b1e9-db3de97691d9
 17 d5851baf-6ebb-5d70-aa2f-e823c4ed0669
 18 f98800e6-d394-7a03-8771-959f1b6d3cf2
 19 9dcdd589-936f-7955-afab-25d2ef50830b
 20 cc437aad-17ff-4607-9b30-5dfb8f6ffecd
 21 4557a744-dbd7-39c0-970e-1d3399e5ed8e
 22 915ac29a-897c-6f26-ac8a-42f8cd959700
 23 9beba2e4-867c-4fb9-8180-72221ae70c3b
 24 17a79234-a348-517c-953b-be8dfbd39f7c
 25 8b651056-9ce5-8509-874e-c254dcb3e840
 26 ed710aeb-56c6-75ae-8835-2a3b973a3f5c
 27 b54c08dc-5456-2e60-b3f4-6ffde9128f0f
 28 8f85552a-78c2-306a-88bc-1ad7643513f9
 29 f3aef733-3a35-008e-b480-02acf3a5e8e4
 30 34c22c17-3fad-0ef3-a9c1-c4d5caa38df2
 31 7237a33d-5fdc-8317-a04f-4ce22ce6bc38
 32 6ba75f24-1bea-6d05-8594-9000384e27a5

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 33026605770312665774364587230086. Exactly this sequence comes out of new Random(411).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 86 of Run 52 (seed 1,430,705,843): new Random(1430705843), 4·Next(1,12) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-14 07:34–10:34).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs