A858DE45F56D9BC9 archive

201309160859 1mhxqu

explained decrypted filler

seed 205

Metadata

Post ID
1mhxqu
Title
201309160859 → 2013-09-16 08:59 on A858's clock
Posted (UTC)
2013-09-16 12:59:55
Timezone
UTC−4 · title 08:59 against posted 12:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,296 hex characters · 648 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309160859) = 3c8d33679e6e921be03a48281ab554e6 (name+title)
GUIDs
20
Filler GUID seed
new Random(205).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
92 · predicted N = 20 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

6ED36A60C81A39C1 7F900DE641B62A50 6AB9E6D6CF43A606 03B1036F0D5AF6C5 79E77A8AF83E51E8 629556849359611B E669C2748B819C20 4FE0598CD7E39A25 3A25F2FA73776EE4 C1649C5E9DF58571 8F85D4957FA6846B E3EB4FD60A9EE73B FEBB0677BCDFA7B2 1FEDE5FA2ECFA25C E1CF6F7A638588F5 AA40AFD7C7267EFB 19F228BDB695A9C3 A004313EC729DE4E C51D3B2E1F9F4527 65C9CBF2CAA8636B 322F631F6179D0BA 090D04E2FEA1C13D DD6A8EC5FB6CC87D 55252C21AE5314C5 CAD75D06361FB98D FB6B18F5C8D3F64D 6D9F4BCBD5B64821 B5D02345CC09E440 BE088E75D9F84A9D 51168D0A24AD9D8F F63EB7E8137C7610 2D56B12DF0069EF1 13F05B649DD29368 B10996D687BFF132 B55ACB4C8D2BDB81 03334308C2C0BDDC 47F22BECA9CA7B4A 0542F25DF521C824 6B97C75980600A6E E7291FB4495EDFF2 60E0EAE3DEBF6881 A684BE9692BDB56D 92511CFF8DA4E37C 225A016BE22D468B C29882F98050D80A AB2BB593F8EA0180 4715DB5ABDDE20C7 9E8657AE60422765 A8C1DAF478E5DA9C ECCB80E6167C7D76 DF5489794D432FC8 1B49BC34DF524EA8 1B6F498473B577B4 80544B100B926660 E832D128528F8B37 C44E968A634D086C 9A9C3C13E1DACD77 F6585F4391E2C6EE 2CF653F01047974C 882DFBF1E5584D8C FAC242A13DE56EE4 7B4E547339E541C6 F944ED9158A69FD4 502D23200C111C3A D359D288C4C5F737 CB3CBF0983EAF986 D165417C3650331D CC3D860951D4FB17 2F101B7E74015E34 EF27CC5A88A5CD62 A13E5B751BF57A02 3576A417FD1DC782 529FC0FFE9E57F74 BC0E1716E8A90846 504EC734263FA97C F63731016EFF3BEA F798C8E25B645587 5987F3F802939D48 53C33962033D3C18 F9FB8A866CB15352 7CBD67C3E10C08B3 
  • Read the ciphertext. Strip whitespace: 1,296 hex characters = 648 bytes = 81 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309160859 (name+title). Key = MD5(password) = 3c8d33679e6e921be03a48281ab554e6, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 20 GUIDs as hex (shown below).

Decrypted: GUID list

  1 aeb6d7fa-db3a-7c22-84cb-184fe9414b67
  2 ec43d52a-8de4-855a-bfc6-9a56323d5ae6
  3 93482213-fc8b-015d-9f22-4a1f38012472
  4 d70cad0d-96e1-2eff-8dc0-846ea3a0a01b
  5 f3139281-89f1-63e2-a7dd-836ba7462cee
  6 2f502e73-8cc6-6960-a738-a034cf76c085
  7 a10833ed-275c-697e-a061-383a3bfdffa4
  8 d9e057b0-f413-2109-a690-55e674a1174d
  9 343aaa97-db6b-3fe7-a7e4-e8f50270cf30
 10 3bb6271f-6d1c-7908-82b0-6d60601a7250
 11 a19f11fe-c56d-26aa-a8a7-a2d74ddc6715
 12 c992863a-dc6d-4ea7-9b62-922e1df8c60b
 13 ecdf130f-b28f-5814-a882-13ac44c25e10
 14 16d5cb03-dc68-15f4-8f47-8819168b220f
 15 43e00e3c-63d5-4999-806a-2b52e5298c11
 16 29cc449e-b40f-04b5-b77a-ae32622606e6
 17 512e6888-b408-0db2-9af7-ac696a9bca50
 18 e3cf9992-dced-0e85-be8c-a96d49bb3eac
 19 fa4a732f-7d42-2875-8485-9420d884f221
 20 7380f37d-2a6a-64b7-a97b-213bc9f6d499

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 78026662372451400026. Exactly this sequence comes out of new Random(205).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 92 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 20; the post has N = 20 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.