A858DE45F56D9BC9 archive

201302212109 1906vu

explained decrypted filler r/A858DE45

Filler on r/A858DE45: a masked GUID list, 44 GUIDs, seed 730. 3DES, key MD5(name+title), as on the main subreddit at the time.

Metadata

Post ID
1906vu
Title
201302212109 → 2013-02-21 21:09 on A858's clock
Posted (UTC)
2013-02-22 05:09:59
Timezone
UTC−8 · title 21:09 against posted 05:09 UTC
Author
A858DE45F56D9BC9
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45 the main account's second subreddit, wiped in 2014; what is known about it
Category
C companion-sub filler (r/A858DE45): 3DES(name+title) -> GUID list, seed known
Size
2,832 hex characters · 1,416 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302212109) = 692eb99d67f26f2a17765bacea4a6892 (name+title)
GUIDs
44
Filler GUID seed
new Random(730).Next(9) ✓ verified
Sources
wayback · body from wayback
Wayback captures
2013-02-25 05:30:01 · 2013-02-25 08:15:08 · 2013-03-02 04:11:41 (UTC; the pages that list this post)
Links
Reddit · JSON
Tags
automated (decryptable)2013Encrypted masked GUID listr/A858DE45key: name+title

From the post to its content

As posted (encrypted)

B022071B571351AD 88F055713383B2FF 38FD34103B5DD770 3784B11A5DDF4C70 F18E2BA447F4692E 97A3253BFDF3D424 52D28ECE2FCC0D24 C7B7E6BEF7BBB35F A3EFC80EF6885A1B 26DDFA08A94CC61F 62112985BDEDB5D8 9818CF927F204342 CC8F6B315C87DE4E 00DA838922401691 618E94C9466B0F13 C53E62D29D4BA61C 9928EEC5D33A38A0 1D8385A382DE9414 BA3EAE8CFC99E4B8 8A028B8A2689624A A5C795590CC49DC2 04571814D6B6C1CD D3CBA22F58A3EA54 89AD1B67CA949CC1 830E2D4451562A83 11EF1EA92D43F9F9 360D18630B18FA67 670AF753B840474A 4A65CB6E54C5893D 1E4A137EF5AA66D8 F027769972337DF9 655C1BEA4CEB97B2 CF77950F302F2005 D5DFCCC3F4739FA9 70D696AB7A0DAED3 6732799AA58C6CB7 453CF91CD5A5F3A7 7C8F3053C9533607 4265005EB46C2BBC 5262880BDD29AF61 7165CB9BEEBF2FEC E3920ABF12C00A2F D33E29BCC8247C3A CA75976B72F67562 BFA8675795A4886B 75EF8535D5A6C6F1 5762EEF59A6F3082 230E353F244A24C3 C6CB72131C92AD6E B979AE3D29072975 5F5183C49DEA3155 17AEE6C7E896B5CB B0923CA1FAF8A18A 692E8F05468B2954 D6D49A09D75FE305 24B6029AF8AC98BA C2934F43F68379FA A9DB8475A785E6BC C234E8625A003EE1 D67A027E0DDA7309 B6BA1F4EA708BF69 FFC29F4D5C59BF90 E9F934C641ADB1CF 2113D4ECAF554855 39D1493403FA161E 62380DF6A5CC9F85 5C9BDFF6120BB6CE C158EBF08413C03F 6E080F44961FE15C 47918C7C3E81E105 D30799E1AC45CDF0 F3B53E2CD8FB6F7B AD59794FF4857078 F02B329DCDF154E8 7295EF142572C86A 7DE2848AFFE1969B CA2458FDA68B8731 2713B015D725BAE3 B7832A051816D473 8CEC67BB85FEEDB9 CF74A30FFE6581EA 7A348AAE19993423 2D39CED9A238E25F 5F06E8F6AACF4AF0 97DAAD54BDA8E55C 6AA25632C7AD0AB5 436150E925CCAA47 17AC6B7B4D56BA03 629F1D83925CC8A7 E739AB1FE52CD949 D7D2B8CE996B4B66 BE7F32A002CDB9B5 3B4159EE06250335 E99EB6D9A69504E1 2EEF93218C3C8489 741CFFE73532A361 E9F5325D1249B7BE F2A09CD6F81A75EC 036D8E315D07FFEE A8E1D0AD94FD6B55 9F18446A72721B70 B20297D8155D76C8 9D7E3375064B914D E936054C6EAE9DDE A2DD598C912A8C35 D858C73BA1EBD9A1 C0FA9179B9FE3A1E 0D0952D7989D0897 06B6ECE3FD30CE11 3548D28825A91003 06A6A31868B39DAB F6554C8A9F031730 FA70D222F77E9C56 45F8DB732596ABD6 0EAB8D708B98D149 4FC638146BDC90E3 974C8F529EB11217 F61BD83F49F796EF C127B577F1B2B401 E37BE01A3AD7AD68 BD21C5DFA0FE98BF 414B7CDBBEAC4F5E B7EB29C788B0EA8A E162CF7738F0933B 7CBCFA8C13C4BD68 2DFE3222236F0C50 EF4AF85E40295A92 2A2984B8C6A80560 C8A16D766D47306D 7864030ED5B1B1F4 CACBCD56D0DD4290 D6D399E2ECB69FF6 B8FFF0CD4849B234 2528AF1AEF809951 13A64884B80EE6FE EDFA75D1E0492A61 95834D8956C0B507 816C709E87C131B3 931B6CC4CC97AD49 8ACABA3CC3A4DE36 BA69AFA4A02C12AF D9EB15FF34CBA3D0 BA63D0737006E4C8 34DA1D79CC2BD682 8761AEFE04A35FF7 929E80BC8F52C211 8C670E8FC88F7CFE C659CC49AFA73AB7 3A4EB41BB403DA55 4E46C0A867A48697 3252DB969D9A6172 880B504F66A3FF04 CCC12F405EFC4EF8 D8EBBB848BD5415D 24306E8B4DCEF50A 1E38775FB22A7DAF 26F5F7B41175F103 2590DE9D225EAC70 1BA1D058D886F804 6BD97473FDB01BB7 31F4C692F94E3F17 6FC070D84520A818 2636912907954059 9D8FCADB52AAC292 F6F204B5B1965ECB 3A67B2220E56B119 A6CBC79493C24858 3DD039FD4A39A5B9 5FF3DC278D86D6AE E02A7358B53F46D2 EC88843BA36B6F94 F4A5984E60B5331B 7EDADBCB1F90F0F5 FEE338544E7396E4 4006E60003DEF315 E1C6FEFCF9A633F6 A1389261A9C4C45D
  • Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302212109 (name+title). Key = MD5(password) = 692eb99d67f26f2a17765bacea4a6892, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 85b516fe-03ef-0a51-ad17-78e2545cda8f
  2 80318d5a-8cc9-0ebd-b45c-5cc49618923c
  3 9a1a2483-dcaf-0047-a8e5-815b6590dcfc
  4 40337c6a-f5c7-35c9-ae2e-e68044ce8705
  5 3212e01b-c8f0-794b-b9ae-8b0a7c715813
  6 da40a143-2068-4cea-9063-f7fbc047fc98
  7 f0e78a19-386b-85a4-ac43-1f54354c5799
  8 8f62e53a-66c7-6c5a-bace-297837ec74a9
  9 0bd0f9d5-2909-21c9-96ab-82fb04b8e366
 10 09be0b6c-a802-4681-b4b8-363f62ff2d77
 11 b551f0a2-e4f0-0682-ad16-3e15775fa557
 12 ca9762bd-dc00-3c2e-9c65-cc86dc54b857
 13 5bb290f7-c428-4e89-889e-4c8dc074d209
 14 442f32fd-66da-20ae-a0be-177c4bb71e99
 15 c966a017-86ae-85ab-a1ba-bf4914ba3eff
 16 e4f17fb4-4e3b-8d79-8532-b14317299278
 17 1cd8f48c-965b-6315-ac3b-8a8da240c480
 18 45322256-e91a-5a59-ac32-4afb6506b682
 19 2330b1e1-1a47-3c8b-9b3e-147af7d853f6
 20 2a6997f5-07b6-8f11-8b19-927a54cf64fa
 21 93909a19-461e-765c-92fe-0fdfe90eb363
 22 6e0bf9ce-b29b-861b-98df-2ee28ae5621e
 23 a08cea6e-a865-336f-9719-3b5f8ca9eda9
 24 9f75a25e-59f7-09b0-bed6-878aff297f7c
 25 479a6e3b-3626-2b1f-b17e-186105592a8b
 26 ea3fecbc-a5f1-05fc-bb8b-55c9f208f514
 27 e70c5714-9b01-5aa4-a521-22888af55c35
 28 9ba27189-c89d-03a8-962b-317ad3c0f148
 29 fe7ef034-5507-1615-8ff3-c1d49275bfb2
 30 585c48fc-341e-851b-9eaf-28ba58661a47
 31 efb9861f-7901-6614-a5ed-2843a4ff54b1
 32 2f24d1c9-a93f-6111-98f3-6d1324e94b08
 33 bf89238c-16c1-7be9-bf69-c0d0ef0b9646
 34 fe97f11f-0f8d-2a9c-995e-866a1756f940
 35 df942c4e-1cc3-4148-965d-e7529da108e8
 36 38a0e609-810c-3437-8880-3f965c84ea27
 37 134000e4-c386-6efe-be04-0a76fac9ec02
 38 d9f1fdd0-01c6-7a03-aba8-a54ed7700a23
 39 2a02a7a3-e330-3a15-baa9-917fa20cde36
 40 9cdf8237-2a7c-47af-ab06-ff6079ef3275
 41 d8936850-aa4e-834b-a25c-c8b2aea5eca2
 42 700845f2-c886-49ae-901e-9296150b94ac
 43 34c57b0a-9aeb-7b0d-9eae-6b4a023261e7
 44 c6e77474-c1cc-780d-8f2b-f8259a715e7a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 00037486240342886538783020501866724367348477. Exactly this sequence comes out of new Random(730).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Conclusion. Filler. The GUIDs are fully explained by the mask-digit RNG; no count stream is placed for this post.

Related

Findings: Companion account · Mask digit · Count RNG & runs