A858DE45F56D9BC9 archive

201208170523 ydbdd

explained decrypted filler

seed 811

Metadata

Post ID
ydbdd
Title
201208170523 → 2012-08-17 05:23 on A858's clock
Posted (UTC)
2012-08-17 09:23:52
Timezone
UTC−4 · title 05:23 against posted 09:23 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208170523) = 735837b9f0ebaa1ed1d2578bbe465719 (name+title)
GUIDs
33
Filler GUID seed
new Random(811).Next(9) ✓ verified
Run
Run 25 (seed 158,297,437) (seed)
Draw
18 · predicted N = 33 ✓
Machine boot
2012-08-15 10:14–10:24 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
9 · 2
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

82D083F731E51862 7C20C92241477C79 145E164986E1D1D1 8BE6EC8E57FCDB12 A782BA328491EEB7 98D2EFD3A1830243 D25A3C2FB4F06175 19083066E342A361 18936D3519C9736A 85D5191BE455F765 B2ADD2F9958ACE1B A5A62A0FB70A3B01 672F7AF44C9F4164 C4D763179A3B66BF 9B2247BE7D97E132 708898A0C9D82F6D 82A47D22224DE46C E7F15AE2466913C5 8EF35BD9A29D4A3F 455D1604E8216842 49282312E03FC9D9 BB07D57A7EC21E12 B5C83DAC135882EA 6B1F9665CCB1450A 95C268860F747CD2 135EE5B838AA94C6 E3EF09E3E12CA350 CBA194619C4A78AD 57E4E2C819D9E15D 9B569F4E5D67B7C4 B37EE6F4712A7C2B 20890F3F153E842A 5CDDEB02A5143DE7 EFBDF6D851E3EEE1 60C11B5428BA363E 6986761D35C24095 2558B54C88B4B58E 217FFDEB74C49AD5 7D967D6D74BB83FB F14D92723D7EE15B DD44F097114FB0C9 59DFDF9312887578 9CF9503452A53513 F788F1C83B30819B 9C30262D34F05F7B E6EAE36000B76621 8FB1DDF8D56E4E1D BDB971BFEE3A74F6 B9A54F47C9E28930 CC22F609C0029FDB 382ABC1C14FA28EC 9265D9884CAF8D22 46D9941DD1F70B98 085445220FDFB0C5 82A7BE025A09A1C6 742711884A34D796 A6B542F9BB826B73 3AB1BB1DCFCA3CAC 41AC406A3E32A41E 37A95FD46A4EC1A3 EBC78D4F53952265 D2CC8556173D1AE1 5C089FAAA7F8CBF1 FC147A9D5252F125 F28FC57EA79E4B01 BE3513BE76C7682B 06BE2EBA53FB6FA7 3F2F1DA315B8D20C EE330465263B077A 4E3CA3B48EBCA4CB 2E972587F54FEC77 491358D1C7E90186 CAFE37E74B08BE33 52B0E34DF3940761 D63AE1A0B3F4C53F 89854622DB609044 A393B4F6B3528236 967C7A6C563DFF08 BDB0E4FCE5C142D2 0E4855BD27A0E3CC 0F5AC3D446602054 F01F8E032CFC0A13 FBC7CE425C48F4BC 65EE956599EDD825 EA3CED639676B4DD 4FAA63C48C42A6E0 3F939700C62A0B63 B45326A671AAB428 F2FB4EAAFF4C903F C86AF829592440AE 97FC2274582A56E9 26DF7E31E3819B5E 034736C04DDE5597 73F4BC827B2B9066 4FB06AC20ACC5210 51AC7AA8D9A1BA56 532D8F48FD94E185 F8238120FB1E5ACE 9E796F64BFDB62E1 2207A1D03D3768DD D8E60DDECDB47E50 9CC95F0609B06DDA 99CBF99F17F534EC BA1ACF46DA46E254 5A497A55E302FF3D 04D230CD18584C8D 625D93D0E0DE8CF0 98DB5450DC4AE899 19BB4BCD135418D9 A5596C68683302B4 A7DD40C06598D3A4 63DD03E2944D5C45 A5324EB589264328 04337A8BFD0F0F2D D6C46BEAA7A118C5 E41A9C66AA9F7B46 44DC671842E13C59 CB36761FCCCC49FC E7CB9B82E50EC54F CB834412CAD09B32 F394C18330330BB0 94E292DD2AA28E89 F78E42D7F249F1D7 285DEBB0E2B9C4F6 959B6D1C12A64012 F1FE75FDD8ECFCB2 FDCC58EA433FF2E1 5BF762411508BB88 269256E54C5E5DEE B09905E6121ED1CC E95AAD398E86D712 2C1052A104EF6DA3 67593CDD1B631388
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208170523 (name+title). Key = MD5(password) = 735837b9f0ebaa1ed1d2578bbe465719, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 832e0fa1-e204-38f8-b6ad-aa26da783d2a
  2 d8a8cd49-c5db-72f9-87da-e28e5de553fe
  3 018f1519-b3f8-5370-8277-250c3099056f
  4 6abcb270-e7fb-5137-af4e-b0d4bd783b5d
  5 437c85a4-9b21-34a3-b296-6fa60a4bd248
  6 e06ca7d0-da0a-261c-9719-d8c83bd0ed82
  7 647a5ba8-a7b8-2073-8bd3-f80ffdf389aa
  8 ba679e43-cee8-2425-9dea-98638cca1b9d
  9 8c6d3b59-9570-2a28-b987-2318adee2842
 10 2ca7d0fa-a866-2849-a10f-15138282cd54
 11 57024c93-6415-7720-8060-6d2a234ce290
 12 957826b5-ce63-5466-8234-397ed65ed40a
 13 96a7c74b-e0a3-14c6-9c08-b25f74299bb5
 14 dd6dcc48-3c40-3434-ad28-1cc45900df7e
 15 e4779278-c7f6-5e78-9f17-ebbfc18f9d64
 16 0455ba6d-9b9c-4651-8bcd-dbc2ab991763
 17 7e6a3bb0-a36a-6446-8738-9c055963305b
 18 763ef6bc-8e0b-7436-9f18-9dab7f14b9e1
 19 fcf350b6-3fd2-5c9c-8bfe-df762f3f0fd9
 20 f6ce450a-abc3-36cf-b418-f57a924b0595
 21 16925ae3-3de5-502f-b2fb-95a0a577fa97
 22 9a2c4b09-2c88-7709-95ad-2bb06464b5fe
 23 7ac3afec-0f28-0e33-aea7-42ae0d94c67b
 24 31663343-afff-3d08-a146-c2e3a164f82d
 25 d2942477-0653-13d1-8a13-5c610a85255a
 26 a4767149-c0a6-148d-991c-1d483090431d
 27 9147d341-29c2-1187-9629-4d72586c5117
 28 40bdbddc-4c7b-1c16-9ad8-27c9744d6b78
 29 bb656df0-b019-4e1e-9fc4-662d590acd95
 30 b750cec6-c20a-2f34-8f5d-6290e16a5c31
 31 65e80e5a-15b0-5dde-89ed-ef14702f47f3
 32 cef9ad88-721a-04cf-9410-0476efd7aec8
 33 f6ce544e-09b1-3a80-a965-0081e8da1f4d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 375532222275135467535703111142503. Exactly this sequence comes out of new Random(811).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 18 of Run 25 (seed 158,297,437): new Random(158297437), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:14–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs