A858DE45F56D9BC9 archive

201207061135 w3y2x

explained decrypted filler

seed 236

Metadata

Post ID
w3y2x
Title
201207061135 → 2012-07-06 11:35 on A858's clock
Posted (UTC)
2012-07-06 02:33:55
Timezone
UTC+9 · title 11:35 against posted 02:33 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
33
Filler GUID seed
new Random(236).Next(9) ✓ verified
Run
Run 11 (seed 37,057,156) (seed)
Draw
11 · predicted N = 33 ✓
Machine boot
2012-07-05 09:16–10:46 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

12B6D1247A3D5496 0E4E8AD7E79A0F9E A8290AE0C2657E84 2F38E28981CEB207 98E268248108E52D DE09AEEDA4FCC446 E23921D4DDA1C069 5E34BB48C461F128 54707F8FC686535B DF4827C2FF5BDAF6 97A15592260A5307 8F1A760B39D12EA3 14E035C308A6FC49 2CDD138473B3AF15 C5102E7AD0DC7604 A45BD348363D8855 5EBB285BCE177F0F 860FBB23041588D2 17244BBD6EF34F9E AD89AA4916BA5B8E 855B0BF72081F8C9 6BBE3DC16484DFF6 0758890ACB30067B 282A3A5CB6BF2011 22699E4B23ADD846 F1D6DB43892623E3 F31D15A5EE79BDAD 4D3F95AE63814600 38484D6A9525342A A74C58F623DF1822 9E66D089EFE5C5D0 51CCDDAD94F8EFF0 D493F87E9D0D9547 8D3F6D3F17FB2AEF 445FFD8868AC8701 88AE66E20C5B38B4 CF8500C3F1978FC0 FC47AB42B40910F7 E3FD0E3C2CE9B315 CD80ABBAE4FEE1F8 8BA315F89F0F1F44 BC39E11EF3C336CC E0BC9444AC90B79B 4EC13C6785F69C15 54E08024D5538BA4 FDD90532500E3960 55B2735A52BC73F1 8F959723ECE4FB16 C3DB9381E8F259B9 E38E8B2575900BE2 D1A9DAAADD63F6A4 E96553A962765608 91EC84FF8528A33C 6AB6B6BF8F24D7C5 AA417F8137043D7D 278731F22267D836 D29E7B626A558398 2017BADE96728687 1372B90232C4EA43 4A410FAA80119828 432A7372D535B596 F769BEF7B26F6C71 D57218D42DC5C1F7 FC901C0223CA797D A2F9C2C6EA41186B 6AFE990860646F59 7128A3BBB0792C34 6CEEE927F181D643 5B3213E9AD5BBAB3 8B6995BBEC7F7990 8ECFC64230278CDE 8331611C442F1C95 23802CC0F82E946D 48C6757EAA730EF5 0F1A35B8CD7CFDFC 91F215CEE86B0E47 64B2D9B210C8E616 77B82AF24E68D924 25C6D4E6CC3C9EB6 D33846073CD80D98 9191C3DCD6855174 3B1E546349317308 C1F764670BC77D92 080E0D44EB76E2D2 6DF06410522C3428 BB5A2EB4D8B4DA3A 0F75622FE875BA12 75AAB2E97C1C2AF1 848C4178571FC405 4A7B1875E19A0B7C 29E3A4267070B4F8 6B46127CAA037580 B9122B5752D1BB39 7D2558732B37AC91 A8EA143086581631 CE9E80D1C81DC98F 72F2CDC8B2E86F8E A42D24C2306EA132 591FA97C921AB89C 09F373814D9F9A1A 3300E0F485964472 5B03179281C63FBF 49502ECD793F8844 DAF674CF15721B91 97AAE3BB5F49C84A CA87BAEE7D3FB145 9B3EA886D63D06BB 92BCEA83102C5704 71C22D7756DAF6EC F7808A695A1D36C8 BD20A424D86CB909 D39853ED1C923416 3EAEFD7E79003ECA B2EFEA2CC32B4DC3 6F8A380A10F31122 41AFC349E45A733E 3449BEF517C2884A A0C46AE45916AE0B A71D87BEA5D4A7E6 56E74CAAA77C37DC 0D95EF67D5937146 CB0524354629DDA2 BE488BF808D72BD3 3683870863D85CBB E9E49C405E5EF7A9 99812F61265E5C8B 1D27BB2BE72BDF43 DC1E70F40F452111 F43F46621A49C232 6CF1D2158D3F9319 6C5EE61D35A8B339 002AF7BFBE029797 5DACFFBA8FF64DBD
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 8542cd6e-6e7b-0f62-b324-908e46d8c38c
  2 b6315bba-29e6-04f3-a7d5-dacd05fff4c7
  3 c1304b8f-6908-6c2e-985d-6d51fa9868e3
  4 a11b2d58-1741-8335-888f-eaa6158cd95e
  5 e3e97d64-df10-68ee-a98a-aa6ed47f00ea
  6 f9c11399-113a-706e-ad2a-a202b8f9f40b
  7 23d97195-90ca-59a0-bd36-ce34eaf36743
  8 eb5290a8-4044-7d04-b7f9-728254d3b3f3
  9 6e33da8e-505c-12e8-bc78-e1de4d9d247e
 10 c016ef10-d7fa-271f-bbba-c00c1982a3ca
 11 99fe51f2-68c1-1aea-ab68-eb5b853669f7
 12 ae3126b1-54b8-6c7a-88ac-7e74caa5a977
 13 3c5030bb-a341-7165-9032-18a5e7665bd8
 14 b470825c-6df3-2bc1-923d-837e3c91d52c
 15 de84d6e1-831d-1c48-bf51-b17d4d48f01c
 16 b8068eec-9d54-3703-ab46-6361cc73d343
 17 880929f3-1a35-0eae-8328-f2e2310a66fb
 18 27db7747-18c6-2eea-8e90-70b94ca0e121
 19 d80743f2-ee7c-0861-9449-b61ed55f5fcb
 20 2d225bcf-f03e-671e-aded-0e6115bd593a
 21 eb145268-ed44-1be0-89ce-e5312108b7e5
 22 5128a368-e673-62b7-9a06-3edb937e6e59
 23 5a1e0291-6092-7472-913c-fbc6249a754c
 24 3f4555da-60ea-4856-beea-d20090565bbd
 25 28ddb3a7-d2aa-75bb-9899-75cbe6681b90
 26 8619bc79-7962-235c-98ea-28153c95dc24
 27 fe3c4137-1736-7a38-af41-3712fd595a69
 28 cce660b5-0945-8e73-b3f8-d89c4331cb36
 29 88fdfe62-2947-60e6-bbe9-1acc1599554b
 30 137a8092-4045-1976-8e7c-b242f49c6801
 31 b54521da-b2fe-2d2c-85bb-de3236456d7c
 32 5bce3045-e7fd-55b9-a787-8e1e897ee4a8
 33 3ad3faf6-08a7-1c2b-a1c6-9c1125b4fa8e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 006867571216721302061674727861251. Exactly this sequence comes out of new Random(236).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 11 of Run 11 (seed 37,057,156): new Random(37057156), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-05 09:16–10:46).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs