A858DE45F56D9BC9 archive

201301231659 174h2x

explained decrypted filler

seed 671

Metadata

Post ID
174h2x
Title
201301231659 → 2013-01-23 16:59 on A858's clock
Posted (UTC)
2013-01-23 14:59:58
Timezone
UTC+2 · title 16:59 against posted 14:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201301231659) = 085d0ab657b1ba2777a9759cb53922f3 (name+title)
GUIDs
40
Filler GUID seed
new Random(671).Next(9) ✓ verified
Run
Run 40 (seed 1,069,639,703) (seed)
Draw
2 · predicted N = 40 ✓
Machine boot
2013-01-09 05:52–05:52 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 3
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201301231659 (name+title). Key = MD5(password) = 085d0ab657b1ba2777a9759cb53922f3, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5d0ccb20-d8bf-25de-94af-7e40cfd68f12
  2 65d4a6ed-1aa4-6b13-a42a-92814e6d5951
  3 5db4cb42-bd10-7734-8f9b-01e9cbc9ce69
  4 9760e01e-6881-7c91-91be-21fe58c0f1be
  5 dd4cd317-5aa1-1f36-bed7-1fe00d94e4bd
  6 5a0df683-d0c2-816d-b5f7-2f5f8e9e5287
  7 60e64804-29c9-4b84-aa51-09493d409291
  8 21d4664e-16e5-0809-aed1-02c8d65c6e14
  9 40df81e2-3295-81f8-8917-277b49001071
 10 41f998de-8b6f-6348-a991-f776761ab52d
 11 1fc0b6b7-038a-51c5-8978-af1a1f1d1f98
 12 aa9068eb-4688-294d-9562-d7f1ee2cce0f
 13 1d5ca605-6734-8b58-953a-3972f972af47
 14 b9da9e6c-2820-5950-8aa1-7b605b00145d
 15 e0579433-bd5c-5c8c-b5df-9093c2152343
 16 f347e3e9-9e69-02c6-a61b-54a34d5d8a36
 17 884542e8-b4de-8e03-a066-ec3305efd085
 18 cd68f4cc-60d5-0bec-adbd-8512022f9132
 19 f78b6b2b-2039-74ee-a525-9f7eea00ca01
 20 53b3c3b5-8027-1290-96ce-429da8a348e6
 21 a3f3ab56-e02d-8bfc-b735-2fabf8ef7699
 22 a50be63f-65d8-4086-908b-fd30ab753be4
 23 92b59c03-9d66-3a64-a894-1dc6f4e36a21
 24 5d54c979-4b72-3ab4-a276-25659a316f21
 25 ca0b1dbc-4248-49bf-ac69-f686341bf29c
 26 acc1dd75-15c3-087b-a12e-1d68965cf386
 27 dd747acc-f106-7fa4-ac98-3584948a9a99
 28 f4100faf-a4e7-4a6e-99eb-9491e974b978
 29 1e163909-b312-72f1-af7a-8985dab60d41
 30 9adea092-667d-49b1-9801-c2eebe15feb2
 31 6afa6239-0df9-85d2-801d-2827fe0ea184
 32 eb817cba-beeb-1fdd-98f3-bf48d84717d4
 33 80d4e0ea-8992-1146-89e7-01a427df1643
 34 bfa1b262-76bf-7075-bee9-bcf4095b0805
 35 231f24da-dd21-89ce-8985-5e5bbb296b62
 36 2442b125-621c-763a-b83e-7fdb7d2e53e5
 37 933a329a-ac96-7411-bef6-88e0b27cd54d
 38 620d585b-94dd-66ff-a0e9-e5c702b3db16
 39 b54859ff-4f2e-2275-925e-f80066fb3351
 40 399cb2ff-f916-83e1-b878-e091d2ef9d73

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2677184086528550807184334074748117877628. Exactly this sequence comes out of new Random(671).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 2 of Run 40 (seed 1,069,639,703): new Random(1069639703), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-01-09 05:52–05:52).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs