A858DE45F56D9BC9 archive

201307192028 1io1r8

explained decrypted filler r/A858DE45

Filler on r/A858DE45: a masked GUID list, 52 GUIDs, seed 932. 3DES, key MD5(name+title), as on the main subreddit at the time.

Metadata

Post ID
1io1r8
Title
201307192028 → 2013-07-19 20:28 on A858's clock
Posted (UTC)
2013-07-20 00:29:00
Timezone
UTC−4 · title 20:28 against posted 00:29 UTC
Author
A858DE45F56D9BC9
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45 the main account's second subreddit, wiped in 2014; what is known about it
Category
C companion-sub filler (r/A858DE45): 3DES(name+title) -> GUID list, seed known
Size
3,344 hex characters · 1,672 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307192028) = 4d8a091dea68728bea17f44dcb2500fb (name+title)
GUIDs
52
Filler GUID seed
new Random(932).Next(9) ✓ verified
Sources
wayback · body from wayback
Wayback captures
2013-12-03 17:18:19 (UTC; the pages that list this post)
Links
Reddit · JSON
Tags
automated (decryptable)2013Encrypted masked GUID listr/A858DE45key: name+title

From the post to its content

As posted (encrypted)

AE0DC3515ECEE881 43B6B952C68C55E8 B876D617E81FFDBC 9D43587EA1D2CBD9 47AAE1FE9B73D39C 370417B8219DEA96 D4F0B65DDE356464 857E9715AE6D0CCD 6A473EEC7C787E3C E80781F37EE155DE 76C024ACF62815B6 108882DC24970B81 1EEADF6939C3728E 2B4CDE2EC5A48442 18A244FEEA7699ED E0EEB26826505924 D6CF34BD79060EF1 1830196B58615825 EA7DDFB85996A9E5 235E8ADEDD3FA464 8C75917051B33C60 8A65D231E3A98A96 94DE5186ECD43615 49814E346769E830 79504E8398214260 EAB14DC81C868E84 D5F3EF2E5A469885 4DBE7E350EA77DCB 92A3E8A4D5731939 4A134450692C4C9B 857C7B857371700B 9953441F0E10E898 6D2DB806C9BB15CC D489AA83BA796583 BF78E92A8A8AB2AF 859D21F0D023F7DD 41F84C667CA289B0 63D301CEFE7C9543 5E5B90D19B7D8A82 E435F914AB585DA4 4EFC351894C6941A 38D22CBE8A317DF6 3DD491ECE337F8B5 E5360B8A7D105A14 C1F7126D64EDFBD2 3E703825D2D811E8 2FBE14217E373762 0CC59344C436E315 E4BDB64CA5AFE480 85AE42EED5CA3C3F D93C576A22622D5D 013D3EA7EE89384F 7EAFF02616C83801 90A2D0CFFC69924D 7DDB3C457256EABF E33B31DA4B17DC91 410D4275DB0C67EA 2DF6EB5D24824CB4 35E63C0E039170F3 5FE36A81CDA9B8D3 2662ED02E10F5636 DFB4F4D0FEDFCAD5 EB84069B502C6922 0116D58FFAD2C3FE 838B6AD9A8CF36F1 E631E154A5496BEC 5E6DFACB56F6676A 58317A0167DDF1CE 41243F2059BBC5C8 ADBAF4E63FB17151 964D5C866F0A9D6F 212A130B8509AD29 E20826C436701314 C8BCB59AE76FDB38 3A5AD670DDAC4542 67610B0AF215ECDA 10A68B98AC991A12 2665640791AB83CE 638296F324246B20 4618740D31A75D48 642D1699F35E97EF 4F2E7F4EC4D2ECA3 0A6CF18CAA0C3657 C595B21C47CE930B 6F28A9742A7C1674 58262E44E739FBC1 A1B1D5449E848B10 46360BC6D1E4D054 7CF98192C23653E6 C60660889B30BF55 11BF1A6907BBA9BC C11E1B32DD8FEDD9 6BCC39724236745F EC7B14D2B1A042E4 E294656A5B3D9441 9C7E7312DC66D3C4 19029ECA2A3F2B93 C1F083A58C3715DA 727C002FB85A05FD 88870A4456D15134 9E0C2936C95237FA 128D5B333183AFF7 FFFB86A8BAAE7DDB B0E847546E98EB3B ACA78A79403151CD 77546B63F093E997 5B0A440A87A4E945 B51D1F3B7846C0F8 7553368228BA0AE4 8C26F9667F96C7F2 6FE8D2FEF4093287 6FFE0A065CCC4C3E 3BCA9FA1CBFC339E FC613B849C4698D5 A59C9705C2CA5F5A 134A0546DFB69EA0 965CDA49C0E4FCC5 141287DDFF9D8BE1 577C1988BDFEE2B9 0D8B249B38619A99 408FB733F828255A 32DEB683CBCB3DD5 3B0204544F6AA175 8325E5864ED219AE CC6E7E2AC69CB193 FE74CCBD42D692F2 6270200145FCED20 8AAF62513DD66679 91F1955CBC63CBE7 AF612164C5FD8A5E B7F49941BD7767A1 350E7942E6C152EE B3B58F30D9880D6D 69BD1903EDA5E5B0 191A4C26A9A8F731 41EB0744061B87F6 F666E170F05A3F88 F492C21CBD9AA219 BD7C49860F814BF8 3000466F3408647F 5AFCE5CD312D4975 8C8D1987261D37C9 0999D910E482145B 059F6C873DAEEB40 0BF3A36430864D07 11297137508FAADC 8FC61C152FFD1E28 2429A327FE4E2B8C 3E01821A17E4B822 C13A1A4D767CD650 3D5E06FA7274F28F 8915D83E827B90F8 298A263836CC271A 5CDB0C32D19E1D7B 1718446BF99B2360 5BC0460BAD4D5BAF 3785F6CABB42E8D9 2E0E4BA155D3D264 37AD3130BE4113BD 28B8CF8F6E5CA402 0D41A635062D1A86 56D996C5361F2964 5F026CF6CE90D6FE 995B94258FBF48D1 EA5E89995762A971 76C19899E469DC99 8F2B88AD3DA19C26 EB5E2618558CC29A D9AE384E39C47701 3BFA70105BC02554 019FE421BDAB6AB3 7630BB8FFFB683DA 71F071DD6D4A1DF3 8403E87957CC6CE3 0138743F5DF496F6 592DF36915D686FD 8B552F5920C11476 B469D30E58FF80E1 76FF96266C310EE4 9C10E8BCA56EE310 3591A112F8A9DA64 CE4652DD7AB74E51 09500FBDEF5D19FA 5F971F6452194EFF AB16133B8C1F405C FCB28A790B5C80AB 6AB9E86B64461430 2FD06F40CAB5F4B2 F576EC3BAF495780 772553F3290DD8CF 5A11E6FC1371C2AE FD71BBDD93F6F195 9425BB71F71E89BC E5408729B60101AD 9B5A0254CD91F5F5 6C5571FB03AAA620 BA7198CB46681C3C 0FF73E9B5B86E016 6CEE1B572AEC1481 E2C178C0C9801DCD BA91F4ABC5C0E2E2 4F51B20ADB0EDCE1 D2F7BD52C748257C 1C3D63BD8EBCD4F9 3F46530B74BF4747 ACB9A0142CD5F27C 4F2E2F8FB4E293DF 8173AB6A4C6D55A5 7978367ADD1F1B0E
  • Read the ciphertext. Strip whitespace: 3,344 hex characters = 1,672 bytes = 209 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307192028 (name+title). Key = MD5(password) = 4d8a091dea68728bea17f44dcb2500fb, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 52 GUIDs as hex (shown below).

Decrypted: GUID list

  1 cda1ccd7-8368-56b3-84e7-36b56ab1a87d
  2 6f11a499-ded1-28c5-a6a5-21c3d1e367ba
  3 7a90c05e-a7b8-2e4a-87f8-b6b794e4ab42
  4 60bb4cf0-970b-498b-a122-dd94433b3113
  5 25ff25f0-dafd-866a-89df-0fa86d82f8c6
  6 26f1a13b-4a6c-0148-acfc-883b0bd44fdc
  7 6b21488e-3d95-404d-b381-887f0c6c1fd6
  8 032460c2-4983-0f2a-a9f4-a2ca879f5cb4
  9 0ffd572b-a06b-22c6-98f6-d10702bb6bbf
 10 8d5a9653-9e97-8979-bc00-f56ce6168acc
 11 e0548c7b-e509-8a8e-bb3f-29d70272d77d
 12 44723172-84dd-0b0f-886f-68d37e5decb8
 13 09ff6780-f8ee-38bb-8b6d-da8b35244369
 14 b4384d71-8ee5-3e52-b2db-5303f99dec00
 15 e4fcfffb-cf22-3ca1-86cd-cd51cb53f791
 16 323110af-1de8-0804-b9df-12cc1dc5f6cd
 17 3d4cd526-bb58-5b5c-a5ac-ab0a6ff68a46
 18 951dd56b-952e-7698-9e98-d6677402a2e4
 19 71314d7e-5700-8579-b4c7-e9a80ed363b5
 20 328a8511-a6cb-14d3-afd4-efe4beb65241
 21 a3c38194-b291-502a-ba89-ea32eb2286ad
 22 ee482cfe-4f7d-46a1-a3d1-2c8129d3e327
 23 f33b541c-a4e2-48b8-902b-7d40e2f121d0
 24 5616c1b6-403a-5e11-95d0-73dbae9afff6
 25 5e8aa71d-c3d7-00e7-a3a6-ff9b1319203a
 26 12583e1b-8744-8cb1-9553-d3b47c6d4be5
 27 c3d89ac1-1c07-2e2b-a667-b3190490d3c8
 28 0bb6c182-ae0a-18a4-8397-2b59d3a0dde0
 29 6eb75b98-eeb0-8f18-9f19-b151e285cc48
 30 c228602f-bc13-67c9-a246-57165bf66b38
 31 3843eeec-4a40-2da3-91e3-bcc2b36375cb
 32 087f7709-aba3-8a91-a756-b1a8e14f4834
 33 adf255c3-70f8-09ba-8ae3-5ff0f902f2ad
 34 f879643a-901e-351c-bda2-f73af4e5a365
 35 cad985e1-a2b5-05f9-ae72-8cde59b0e570
 36 06934c1e-ccda-1627-940d-4f85d787d830
 37 74602a5a-1af2-0e29-a397-ba133983ee4f
 38 e1576ff9-c1c0-4f71-9be3-19635a4a3327
 39 c1ca2231-5596-8537-8877-6bc895db7883
 40 f5d65878-601c-1f21-b8e2-778a24edf12f
 41 20f33ee2-56f1-88ba-a85c-7d4769c7a823
 42 6606ae38-d308-5fc7-b4c8-9e3c34d9f71d
 43 163b81e9-abfe-3612-b2a3-d0f75a743393
 44 6fc5e129-2857-6cb5-abd6-eaeafac9f1f2
 45 0de8f63f-1096-2418-9a91-9bdcf6b06df7
 46 776d7b89-01ea-4e1f-a623-c8f7b645481e
 47 47130c08-724f-3602-93df-f2116cdf2054
 48 c917c306-5fec-079f-8349-b88cc4b30b0e
 49 990b3eba-e31d-105c-9767-36b110a64753
 50 7688bdd4-8fb7-3d83-af3a-231cf221a397
 51 49e62dd1-7555-6144-837e-f16e3486dd48
 52 562b3716-1fb0-69a1-bb92-8b1be88f9ada

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5224804028803330578154450821862803010481853624301366. Exactly this sequence comes out of new Random(932).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Conclusion. Filler. The GUIDs are fully explained by the mask-digit RNG; no count stream is placed for this post.

Related

Findings: Companion account · Mask digit · Count RNG & runs