A858DE45F56D9BC9 archive

201302171559 18pj8s

explained decrypted filler

seed 410

Metadata

Post ID
18pj8s
Title
201302171559 → 2013-02-17 15:59 on A858's clock
Posted (UTC)
2013-02-17 20:59:56
Timezone
UTC−5 · title 15:59 against posted 20:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302171559) = c558a0219c7e6ce76cd85ed57564b8f1 (name+title)
GUIDs
40
Filler GUID seed
new Random(410).Next(9) ✓ verified
Run
Probable run 3 (seed 33,600,187) (probable)
Draw
5 · predicted N = 40 ✓
Machine boot
2013-02-13 10:24–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
44 · 5
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: probable

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302171559 (name+title). Key = MD5(password) = c558a0219c7e6ce76cd85ed57564b8f1, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9eda2d2f-66a7-85e1-b5b1-d0b4fbd1eec0
  2 d58ae1fa-9a1e-1b97-ac96-4ddbe558029b
  3 182daa3d-5ce2-31a3-9a56-be46fbfba1d4
  4 b8cf1726-443f-0969-bcaa-86067205649a
  5 d7aed903-a83a-2339-85bf-4589d20b84b5
  6 3c423f06-d9e4-79b0-98c2-4f39e6c7a0fc
  7 94467577-53f1-583d-bd4e-db4d3dab8f05
  8 93a0ac71-aa99-1dc1-9883-8966bc971ffd
  9 e4401f72-23a3-699b-9988-a421bb62cda5
 10 e4436e19-f095-4d1d-b2d0-36ccb8aba1b0
 11 992ee963-4e30-3dfa-a7e2-24813be54ac8
 12 01704f35-d68a-55f5-9f62-d0a888641d53
 13 0f40e33e-9e1a-4215-b0a1-aa567e53cb5a
 14 01108c70-72ac-6ac6-890e-eb0ea4364c5a
 15 f354a124-078e-8290-ad60-8942c4c5b6ea
 16 cd1a57be-d5b4-0b76-830a-3720a4262073
 17 895b058f-5961-1c0c-9166-ebb7cd14c19b
 18 a532d2c7-bdda-1159-9bbc-11aea0710b14
 19 d23a533b-1f67-6c48-9485-8035d03528c1
 20 8a5c9092-e338-02b6-be94-b57634ffad9d
 21 069d9e57-380a-2ab7-a97b-9fc3628eb65c
 22 de5ccbb5-3e45-3f7e-9ae2-030c53cda1b9
 23 becf9e17-7c1c-228b-b25b-933a3f0d578a
 24 51378a27-8d58-212f-8a41-293e623b0d04
 25 b5a24563-d9bf-7da1-a6bd-5c3a4033cec2
 26 3d3466ef-5591-2d99-b900-f0c85835c8fa
 27 c93d049f-81b9-34c0-81c4-258084c327fb
 28 13437b99-4286-68e5-91cf-3869464a36a7
 29 b35a1115-7ed0-70f6-81cf-d166745defde
 30 49d16431-aa82-2a82-a6e8-2732d98a04d1
 31 602e8a81-5524-4678-b497-d8141cc85618
 32 d74e2421-9abc-4d06-94a9-cc08c326d263
 33 99ce82f3-cb5a-1e64-be22-465f75114c22
 34 45a931bf-b447-2c39-9c1c-3380fc46bb22
 35 2e18a9ae-8284-79ca-bb42-009c652f74eb
 36 05204be0-a687-4c5d-812e-0375bfda7873
 37 b7226215-09fd-5bde-bdf5-52b566aa52cf
 38 88de2038-5b08-7ce1-9533-e4b2ead5ac31
 39 c697efbb-d59e-5f20-b029-ebd5ee760790
 40 47926572-0da4-62fb-8f47-ede92e21c952

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8130275164354680116023227236724412745756. Exactly this sequence comes out of new Random(410).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 5 of Probable run 3 (seed 33,600,187): new Random(33600187), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:24–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs