A858DE45F56D9BC9 archive

201206291026 vsxm5

explained decrypted filler

seed 317

Metadata

Post ID
vsxm5
Title
201206291026 → 2012-06-29 10:26 on A858's clock
Posted (UTC)
2012-06-29 17:24:27
Timezone
UTC−7 · title 10:26 against posted 17:24 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,872 hex characters · 936 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
29
Filler GUID seed
new Random(317).Next(9) ✓ verified
Run
Run 9 (seed 449,725,219) (seed)
Draw
29 · predicted N = 29 ✓
Machine boot
F 2012-05-15 19:12–19:12 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

31669FF2CB09CFEA 2CA69FD5CA4DFC96 64EBEDC1B8761ABF 32301D91678782B6 B4450E9A85F1A07A 65B1BFAB768ED9EF EECEAEBAFA13DE57 D7D0AFB6E01C5517 CDED6E4C31F5C60F 8DEE2912CD1792C3 48F3D4A35EC5473D 90D29E8BAB28DF33 AAA73BC03170BA8A FED8E3D79CAF3D59 AE8E622651170B96 766445384BC70C04 96E7C694C0983A50 E01025D035B84949 AEB3B40082B982DD 3D7C98392747612E 894A6B78AF46B48C DEAE2880DDAE94B0 F162D120E071287E 8D0521AFD7E9FC97 4651CC3DDE4BEC9B D8769878D7CFBE7C CE046567CD0599C3 4A72C469FBB35DDB 4C0F29B73AF257C3 E8EC3DE4C1152266 648D5C44313DE47C 1B0E2F25245C8035 43742EEE92003C89 61F96D0A9479C546 E22EB928965751C3 C8D880B2B9219030 45CB96105DD10987 B705C386F21F2435 849DE90A5DD35B24 6B8C3215200B0FB5 02B6D2EC462EB5BB 8D3970DB6D2E4070 274CB1758BFCC891 9A1C51107ADC5BF6 16E9DF7952209547 0279EFB83751CD87 034347BAE1FC7202 FD5875F7B05E7A43 AA0A608219C836C1 2BA5036728088498 4B5D1238F4FF37D8 0C794D5A449CC8FD DB2631CF53DA5ACE CC9C5E6C8A8F1010 6B12BB1F39D5B422 BC15D484B4D437ED 671F85977CEFB7C0 3364008B5A519E9D BE1A3733178867EC 41FF8027CB758D2D F36E891F8E23465C 2112BE0D2C985516 E8D8DB7DCD933A79 ED567FA37970704D 981EB2E0A8CF3CC2 42854383F91FA09B 464202753D4609FD C4EB4ED8F358A260 1601878D6086A628 77B087A1102CAB69 652F440C86BC3034 8343AC68439281C6 A3591F7ED5A9BE4B 91870E8C3D6DE50B BF104D1E6DA693E7 AA717940E42752BC 2320DA3372F16B8C 7A72B710EDB70801 663F51E203E789F7 E1E61F5473C8649B F5772C25F821E129 560D4049B4BAE6E2 41975BB3C8E8CB65 4E2157E6C55A165B CCB49CE5670EF530 B7A5CCB4A2590937 B19194B6EE6CCBA7 9A269F59B4A6E973 7CF103067B95ABD2 A7FF6733B655B566 94B35B498849A054 AF03198A68DE75AB 1A54AC6FD2BA2F84 CA57233D585E9BED EF53D4D7D8481F41 8938C613BC7F73BD 4BEE875B446EB51F 3CF30809B08792F4 E9442F4A51F0BECE B97226DFC78C0A79 EDBB1F23D407BF5B B03407DDF0EC9C26 E98781858A0B53B6 F63D86E98B0EF7D5 9644299C277A2000 BEDF7C4A51B4C207 75A2C32B6D07A732 A93CB7FA50C7A7F8 E14A002B068A0868 2293851A4482CC47 772E65F5743AD42E F7FAD39CF8F21EF3 D7C88596FBF0BD80 065C38A98B274444 220177C11BB49947 81BF2E4AF0184C42 5DACFFBA8FF64DBD
  • Read the ciphertext. Strip whitespace: 1,872 hex characters = 936 bytes = 117 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 29 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0d2c0127-8e9f-31aa-aa5f-31b4c8d943e6
  2 37e80936-016a-748e-ae90-d0f8dc9680e9
  3 f7f94643-9032-3259-9489-d523566715ab
  4 5c73a295-0194-1b74-b533-f5fa0c138c12
  5 cc45eb68-1206-2bbb-9f30-c889f7689197
  6 3ad41847-3273-5e7d-bce6-efa63c204df7
  7 85221040-f105-8c04-a20c-805f3a31c060
  8 8d5793a3-4d86-43f1-b31c-f6dabffdacd0
  9 7ea6280c-ae83-1dd4-9ef2-da3616837568
 10 8a29ee0b-8bb4-1210-855a-659eb26333e1
 11 a2454140-c92b-7a2f-8075-61a4c7e97f86
 12 6c7a5303-6743-8205-8dc0-c9fb988d9c83
 13 90863b67-e550-4081-9e66-d41b023854b4
 14 49a173ec-58a9-34fc-8527-4600906fc5f3
 15 d9cdbf6a-4916-762c-89eb-35fffd66f9b1
 16 f59421c1-554d-04b2-8cfb-6ba2de7fd3b3
 17 c95e7ceb-8c34-1f8a-9043-b28fe7d43de9
 18 ebf7cc94-fad3-4502-a1b4-ad38dc7bc789
 19 c0f08513-8bae-284f-a3a9-68059f90d4f0
 20 4a62ed54-2d57-0f67-93e3-9566466c6e10
 21 2e154efa-19e3-8afe-9976-512c5484f02c
 22 78002ec6-c210-508a-b062-e6507e61b29b
 23 900240ba-f02b-5482-bc8a-29ec4ee34ffd
 24 79fa3c0b-1f34-6323-aa2c-07ec232cafdb
 25 8230d8ea-28dc-6473-b82c-97c80a17a64a
 26 68e268ae-0781-393a-8bd1-075e5498eef2
 27 f4c340ac-dc8f-4e9c-8795-b3c70dbd165e
 28 60a330fc-a9a5-026c-9ba5-5bf2fb60a2fe
 29 0cd962c5-b014-035e-8707-4bc89213a139

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 37312584117843701420855663400. Exactly this sequence comes out of new Random(317).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 29 of Run 9 (seed 449,725,219): new Random(449725219), Next(8,64) per post. The RNG predicts N = 29; the post has N = 29 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 19:12–19:12).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs