A858DE45F56D9BC9 archive

201208170741 ycfqu

explained decrypted filler

seed 784

Metadata

Post ID
ycfqu
Title
201208170741 → 2012-08-17 07:41 on A858's clock
Posted (UTC)
2012-08-16 22:41:18
Timezone
UTC+9 · title 07:41 against posted 22:41 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208170741) = a4033ff5d061ba8447d023f76b5b4329 (name+title)
GUIDs
40
Filler GUID seed
new Random(784).Next(9) ✓ verified
Run
Run 24 (seed 39,416,093) (seed)
Draw
95 · predicted N = 40 ✓
Machine boot
2012-08-15 10:18–10:21 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

CE1FBC49E9AB63FB 79ACC5D5F64E9A51 CFABC81E6AEA651C A23AA0C5FE44B9E6 9B2122A2A961BCF1 D26C81C53FE166E0 B6107BC766C380B9 50671DFAA86C0AB7 9BF87E46873C81AE 182F53D680C11D2F 6FD09CB89BC055E2 A62F20ED5EA67814 904D1EBB60B7EB48 7CF986384CAE2584 CAFF21DADD3C48AE 7C8248392F2028BE 81B74F78855B18A8 B9B5B66478C2F706 46C5F9ECEF176914 15154009A5A83BC7 D4694344FFE50A5E 4486510C3ADF2A0B 0910FFC93BD672FE 9490084C23E62FDA D608C57DA0F7E7C2 EE47ADD1E195BB9F D4A31CE44FFF932F 21B28B95F9E435BB 0513AE1372630F1E E071CE78F9CEB4D7 FCCD32085173FA39 7DC575C5EBE0AC43 3184067D6B7E0C90 391F3E81E30ACF99 D144BCD1928C4776 9FCE3C9BF532B230 D80FE5E2A85A7A73 5C8FE7617725CD86 AB0319EE5B410BC5 0CB3C65FAE2639A3 63818E465FDAE490 E2BEFCDB48598ECF 1E55A3AF4FA3C53C B397E7038CE0DF5E 8A16A74151DE3904 90E1C00142BF8C4D AF9BB58BA2434B15 640F2A62B63D699E A4C977B94789644A DAC2CDA0D504B475 F7D08D80ADF6AFC9 7EBCD59B38F080CA CD6F1B4B6F97F855 10F298A68D2B3193 4E9F215946181208 6117724E19C581B4 6CB1BC4C6E8A3C03 7506E71D60495040 BFC95E515B0211DE FDF786BB209130EE DBF3119BC4FF3D32 67975C6492BCEE4E AD92AC4EFC54807E 7C2DF69512E0A4EF 1FF025003A079AA9 0E22495282D99EAD 6BB09E9F9876E0A2 0FBAB48EAA8FA81B DD84EC65E6E38FE3 96F3DFD135B086CF 7932322C4C894870 2D93221BF326A93D B120FF5FF843C65D A070AAADF1C18072 0093436101BEA872 2713E98AC12EB4E5 DB09B946BF5824D6 F6D40ACA8121F474 DDAE60E357F0EAF8 D2999032EB8D15AD C854612EA45C5399 1028BE48948FFA73 33F302C77624B7A6 B50EB24712F9BD9D 3D9477DFB603D4A1 A879CD273FBD661E E37C4BE9FE7D3810 6452D94DE0275F29 7BC3100CEB3086DF 59368891A3DFD1E9 F685CF17D8DA74CE EC4E760EB889A8B2 77DD7EB438D35AD8 AB9EF277F9EF27A7 61CB795A24880CCC 0E58EB9E3844C0FB C111D002C86D16E6 5880223D9AAB36D1 DDAE081A0F167119 3B19885E73A46084 7BD0E80A0EDFC9B2 E4888EDD436A3FF2 7D0D7EC20556A606 61421A7158FD26F9 DE6E6372BB85183E 4C149A74D548BA4B 5A0EAD9498E0F283 E79CE8C5C0980A03 F4F5E852F32EA644 FFCD151F1B4B749B 67A9D1014DCD47D2 590D87EC3D037C16 0643894E000456F9 623A0E1AEB5A3C1E 893EE8F5B924B26C 596F2B9FC6EB1583 E72FE6DC99656942 8B74CCE2F83D677F 18C995E5D20D4212 61DFFDC747B9F72A 0923415B3E44BD68 D3269546BA916374 57E3C274ABCE4747 A65471BCDCE7D79B DE7EB45DCF7B6DA0 A4C62E99D133EDEC 3998AE903E2EEAA8 B8C61DE369EFD869 675B23661DF4A466 113118C518A4345F F975089496CF38FC 75ADC99F49A8316B 56BF45C411D15B79 69BB6188BB8AF3A6 B46FB9A6AA6C485E 99493AB4CF01F01E 2A67EF5BCF6F3653 C9A0713AFF301BB6 C26491DC8CCD1A00 1B43D2BD3118D783 E170A43FE8D68656 59C72C00FD19E636 72CC2A8E7E535EF7 8ED48E13AABEFBBF 84D28AB342A99A6C 473A26913F52ADBE D7696ADDE56D3ED7 B74D012B5B577857 8AC1548AB1D133A6 A878E832F978027D B93C61C3BF814FCC 2D298351F26AC931 2D7968C46B1C542C AE33DE1164C65BA1 7041045012316DBA 4144FB1B429B86DF D28C2A2B091DBE70 C1A5157839B57D70 23E5740DC41C2BBE F676AD0C8B0FCE96 C02A1D8A28165A9B
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208170741 (name+title). Key = MD5(password) = a4033ff5d061ba8447d023f76b5b4329, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 050c393e-7032-2875-ac6a-b0c1b263a50d
  2 95014f64-b56d-7e50-a1e9-34c82de64f52
  3 006e4f87-8327-6933-bdc6-e8c0d6cbe630
  4 0e9e4029-bf93-8cf8-87dd-4b9618d4216c
  5 5fc0d08f-c09f-1ce2-856d-b96f23444d4f
  6 d6d2be75-bbf3-6b38-83e8-96b4cf1fa48b
  7 093f71b3-c614-1039-984f-d61a582b445a
  8 09b99089-b2ec-6f71-b0a9-954e8246f545
  9 4037b4c0-ee62-83e5-a9a5-2a5dbc084bed
 10 55e7ba45-1a13-36b3-9b26-a5caf96030ea
 11 c7c3fefd-89a1-78b6-a498-682b90812650
 12 6ed4c281-83b4-4c3c-9de2-82d57b1491e4
 13 b3f11759-4352-5630-b162-b69b13987595
 14 f7ce7582-ff60-3922-b124-8e00e739183b
 15 c60022ec-49d4-6d59-8c60-0342c6ca9b67
 16 5d779bf3-ae2a-5d57-b471-d89a4a076c2c
 17 c4da8098-1d08-3ecb-9c15-1e7b3b6cee01
 18 950d7ea0-bddd-0495-b6bf-49c05c0bbd4c
 19 f82ec2aa-2c3d-866e-a83d-51954293d8a8
 20 874e96ff-c09a-7f22-80c5-060a2789e0fb
 21 b7080f1d-ceb7-89c2-b3c3-c2d00f142857
 22 d93e2f53-430e-180e-ad53-96ccbe34e7de
 23 b8ec6f93-fb42-4cf3-ac6c-ea7fb1f344cb
 24 f4c5491d-889a-8436-8ab1-281cf1be3ec1
 25 bf7c5d29-1302-42d3-912e-ef2e531bce5d
 26 e8b4628f-8ccd-7ed4-abbe-99620c206c4d
 27 8fe5f026-41d4-8463-8e95-36135f95d62b
 28 3a891805-4afe-4270-a316-b4cf74fc34aa
 29 004b6ca7-99f0-0d11-88df-e87cbce9f7e0
 30 44101829-cac4-4dc1-a8af-1808673b3e34
 31 0f9e8f67-a080-5142-8a50-75b1b576be3b
 32 60013b3f-c52b-8ef6-b6c2-7db78b016043
 33 94a472aa-01e8-5557-be8f-6aa63eb068b4
 34 23b74805-da3d-5fe0-926a-830cc0c6537d
 35 1b4e95c8-c68b-35da-badb-66cd2669efbf
 36 4e943a7f-0d36-6f3a-95e4-85e2bccf5a82
 37 874b5b72-fd26-4945-9729-c7f1e59ec80d
 38 114fce50-8bf6-67d4-ab94-eb431ba52528
 39 8ed73da6-92f9-5165-b917-041147c540d6
 40 55e5fba0-48a6-1808-8d00-66266fff3244

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2768161683745365308781484784045855364651. Exactly this sequence comes out of new Random(784).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 95 of Run 24 (seed 39,416,093): new Random(39416093), Next(8,64) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs