A858DE45F56D9BC9 archive

201302191559 18u97i

explained decrypted filler

seed 990

Metadata

Post ID
18u97i
Title
201302191559 → 2013-02-19 15:59 on A858's clock
Posted (UTC)
2013-02-19 20:59:53
Timezone
UTC−5 · title 15:59 against posted 20:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302191559) = db39a223dd0a80f899079536a909c87b (name+title)
GUIDs
36
Filler GUID seed
new Random(990).Next(9) ✓ verified
Run
Probable run 3 (seed 33,600,187) (probable)
Draw
7 · predicted N = 36 ✓
Machine boot
2013-02-13 10:24–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
11 · 8
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: probable

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302191559 (name+title). Key = MD5(password) = db39a223dd0a80f899079536a909c87b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 245de877-fa46-8234-b319-344fc80e8036
  2 3d6ba291-6e09-2f0c-a835-4b9043f6283a
  3 db0210f0-0f9f-6f98-82f0-c6cc41e4683b
  4 b0b0ccdc-829b-7441-9d09-33259d649d0c
  5 d698739c-1464-1530-ac44-f453e1f8f7e7
  6 1fcde44a-903e-62da-b78a-da42bc43fa41
  7 2b0b11b4-c8ef-4eb3-bf33-eabcf55316ca
  8 cbfa7ede-b213-0696-8e85-6c05d5987996
  9 791b97d7-779f-4e41-9e15-96321f8d56b9
 10 f99fa354-2da8-355d-bc50-dea2ca2ef368
 11 db3be639-e55f-5fab-94a9-da2e41131763
 12 ebef1a1a-074d-3934-bff0-a56fc08b057c
 13 307b1a2a-a72d-164f-9a92-003d50e623e8
 14 5188eadc-f2e4-45fa-b877-02fcae95f186
 15 a0075159-1faf-895b-a66d-1b3fde3ebbd2
 16 0b5e17fe-3b2e-2a2e-bc44-16b6f8fa2869
 17 b96448d7-eb57-0b2a-b439-567f18330f64
 18 420cdcfa-d638-7cb1-b270-95d1c193c9a4
 19 8f81d0cc-3582-4cda-b6fc-4059bb4c5c2b
 20 431e2c91-c965-51be-830a-1adb9e47dc4a
 21 0d2db5c8-7308-38d2-9a6f-9fb9a18829fd
 22 846f65f3-8f11-6b39-82e2-8b85b8a79ca7
 23 897a6556-ae01-25bd-bdae-f5f8cc7d3cf4
 24 addf99e2-74d0-7937-ba24-14b258b03b04
 25 4a6c151f-f588-6600-ba0c-9b5be7ec478c
 26 ba8ca3bc-0ab1-2d91-8375-18f06ef9063a
 27 a4245503-9fcd-09b3-815b-855acfb6ff68
 28 50f4912e-6094-03db-8349-33072002b62c
 29 ef7a811c-30dd-83ff-a68f-b232e80b2a87
 30 077faf11-7a2a-335a-8663-17e37ab162f8
 31 5a319f0e-472f-6d82-8275-ecbdb61311c3
 32 82f7db6a-ac92-2ae6-a85e-7a92ff6ba82b
 33 430312b6-aafc-3759-9f71-ceb5a1f40c22
 34 4d67da2f-52d8-77eb-b238-e80ab97590dd
 35 23ca73b0-3231-2deb-bc80-c7f06eefa893
 36 0bdbf277-8260-6379-ac3f-cd9309b770b8

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 826716404353148207453627620083623726. Exactly this sequence comes out of new Random(990).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 7 of Probable run 3 (seed 33,600,187): new Random(33600187), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:24–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs