A858DE45F56D9BC9 archive

201207030935 vz722

explained decrypted filler

seed 15

Metadata

Post ID
vz722
Title
201207030935 → 2012-07-03 09:35 on A858's clock
Posted (UTC)
2012-07-03 13:33:49
Timezone
UTC−4 · title 09:35 against posted 13:33 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,872 hex characters · 936 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
29
Filler GUID seed
new Random(15).Next(9) ✓ verified
Run
Run 10 (seed 38,548,093) (seed)
Draw
16 · predicted N = 29 ✓
Machine boot
2012-07-02 09:51–10:51 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

1DF9E26CE78BB9F5 38BF573AD8B7E11B B1A2C0A865349CF5 F32295ADB83C1BC0 2A04710A16518400 2D608E8B4E881CC7 B3C7763E1BE42E71 76A3DD196276AB05 BE664DBBA8347FD5 96C5313925979362 50792BA8B756A0D7 160E1A882C80A170 BA6F07E5D50D6A42 F9A88BDA576709D4 30DD0EC9B53BAADC B2B2B2562391C10C 3B2EB86D52530FD3 6BD9B776DB7684B7 ACA7704B2C9B3E88 AC2CADA4BD313162 FCDAB5B676273078 9567FC13D5D7B9B6 AAEF9E84E0DEBED4 E6A8B70A4B72D4CB B09B82ED71107FAA 65F0A5B9E30ADEAC 4EA7FFF1E36EECDA 9B9A043C949BFAF4 7573C6BBD5A4C776 5F5AE432FA2CEC1C CC495C61DC7CD09D 378E8A4CCF2939A3 B195551AEEFCDD2E 8CCF2A40584E75F6 057173CC2E8475BE A078C2E330AEE89A 8429ECAF8272687C C76946DD96E2782A 9B2CE23B4EE0F23C 49491B1A9AC1D9EB 1449ED1BC7DC8B6E B24E4F9B2C0F2734 DC78C45B60A542BD 8D4C8A9CE243BFD1 A5146E3068533B53 DC88B84CBC8D01CD C15F7E5A3C5ADF57 7E1D4B24E7F419D3 01D58A4E19D7C9B5 6F809082357BE3E6 FF3CD7DE9BFBC81E 10F604D3AE85BEF0 D3CBCA7EB782AD85 CC7AA4F3A21F5E8B 8E49B21811A92F43 DC012955FD97BFE0 0D99ABD76E191915 9C627C57ABB96EEE 8DAEB1956DB20D5B 87548B2C0DFD1A06 6353449A0316E340 314D3BFEE5D48DE2 170066565258F12E C13F474D44A8577C 584CD15D1354F65F 3400858931F77B74 3D17862CFFA9D31B EC9477B70FB62AFF 733295639CDA254C 4FD16A31FF72385C 8A03F1CCEEDB73EE 3AA4BCCDA1E79549 5229721330CF3BA7 47E6B03491366B71 8D5C7683E652BE6C 060265E2B56A4AB2 C48C1E2DA41B600B 13C68FC7207DD0CB B28272A6AABAD57C 07657F8DF98EC164 40B93FFF811D38D8 12F200D60B90F860 75EE587198E9031B 681F3497A055E4D3 A4BA6CECF63409A4 6AB94FAEFF307915 5FBD7AF433EDF10D A18995E10B596399 B5BA7C6929AD48A1 9B4CE31EB45D71EE 6B8EE5AC48B5002E 34FF40EDE35B1E58 7D895BD064841129 AF4F9E1C5BCD018B F7FD0DAF4A71E43B E9E8319494FDB481 BBD2044BCE4BD327 33BF336DB800598A 4222F13B81FF7CDE 9DEB465C49C934AC 0F28407B13A063A6 8BC423D503F5E7CD DD329319D0199B6C 925C4E7DBA90E4A8 B79F5DB1884BF8B8 F9E62861B48C70A7 5F4FEB83EB537B72 8BE683E940E63C57 959B2F73B09D417A E709CA0EA119F480 2FEF3B9B8EFA8C79 0D603922CE4E8E36 5725581295849B49 432D93E8F2F79199 5DEABE208FECA93F DFC56494EF846973 5DACFFBA8FF64DBD
  • Read the ciphertext. Strip whitespace: 1,872 hex characters = 936 bytes = 117 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 29 GUIDs as hex (shown below).

Decrypted: GUID list

  1 78652e70-d73a-5b9c-8bb1-ef4ba9d0006d
  2 6c61997a-7822-1e8c-9ebc-4547b5b598b3
  3 f9120924-c757-281e-85de-80c2211d3f43
  4 b4afc252-fb44-6959-a811-5299e04c944a
  5 61b126fa-7b3a-8e22-9e8e-44742d34d907
  6 df1ff3b9-bc10-689b-8fe3-e7a0bb77f6f1
  7 e4fe1230-b229-5f30-8b4a-69d28e2779f1
  8 d873d659-e8fc-8704-8278-2a87a91aac89
  9 1bfebecc-d97e-7ad1-8806-200ab60bc68a
 10 59402051-ffb8-7477-82c7-1899df420872
 11 e0db9c76-6e65-33c9-b3a2-bc25b5c7e02f
 12 fac89568-26f2-1df9-bdd2-673b970f80d5
 13 a68e45fb-bfbd-8033-9761-b493bd106f1f
 14 f8960372-1c2a-235f-8d1b-a466ce4225a9
 15 f33901f1-c74e-487b-9496-64968d130a5c
 16 0aa586c8-7687-3e0d-8457-bd07ba350c93
 17 033052ee-97de-1b73-abb5-764572dfedf2
 18 2d55c1e7-1571-2cb1-9378-becda3f3bdcc
 19 8ed4cd11-1720-0a27-a004-4789c93037cc
 20 75cf5898-508c-1d42-92a9-0137acdd9a76
 21 f24a050f-f46c-7585-8036-7ab6d7220539
 22 6f1a8022-839a-4a27-bd4f-ae9d86d07e89
 23 30ee8628-dc03-4b07-8326-7ca0e1f591fb
 24 042928a9-546f-224a-94fd-1802e06ce50d
 25 f9882e57-26d9-19b5-87b5-c0f2a56e6de2
 26 4a6c061f-c220-16d1-a621-d2c82c3cd46c
 27 58651961-6aec-736a-bbae-8b11f43ecf77
 28 83616ed4-e619-8890-9aa5-86d1a8a4e862
 29 97f9b3f8-e492-66c6-8bf2-425330a4c8f7

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 51268658773182431201744211786. Exactly this sequence comes out of new Random(15).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 16 of Run 10 (seed 38,548,093): new Random(38548093), Next(8,64) per post. The RNG predicts N = 29; the post has N = 29 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-02 09:51–10:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs