A858DE45F56D9BC9 archive

201302241802 195nos

explained decrypted filler

seed 851

Metadata

Post ID
195nos
Title
201302241802 → 2013-02-24 18:02 on A858's clock
Posted (UTC)
2013-02-24 23:03:00
Timezone
UTC−5 · title 18:02 against posted 23:03 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302241802) = 2c3cf31c7a610cc7e427c9a554e59f36 (name+title)
GUIDs
40
Filler GUID seed
new Random(851).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
3 · predicted N = 40 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302241802 (name+title). Key = MD5(password) = 2c3cf31c7a610cc7e427c9a554e59f36, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 8f9711d7-65c1-2946-9ca7-7e92a7f1efcb
  2 1b47097a-7c76-42bc-8157-874b987b7d24
  3 433a43ad-7f56-5446-910d-c5e38eb55cbe
  4 9387c103-c428-1eaa-9fa2-3166eeacd731
  5 db532914-f390-34ba-bb13-40d1a6da66f5
  6 9236d077-1501-2c27-897b-2d6e7da05a3b
  7 c6ac76d3-b247-18cd-9490-ea80b88f24b0
  8 9c410c99-0e7a-374e-bd60-bed8504f5ece
  9 c36f3d75-6ec9-2ede-b1d4-4a193901c374
 10 84fb5e4b-8aa4-0995-a201-254754c767fe
 11 f6b45ee9-74f5-24ae-a80a-5e6a5391cdde
 12 e12556b0-89e6-7611-b8df-68a873b76e9f
 13 76bce507-21bb-5881-a200-ccccbdaac095
 14 28893ffa-09ba-11de-983e-47102f9e96e0
 15 07e3f051-78ec-5453-9f0f-e1482a6f4912
 16 2b736158-0750-4270-b19d-831d20a0f967
 17 c8822402-0627-5d31-9cdc-571ff9fa292e
 18 f8968dea-53a5-56af-95c1-3ce8596b54c5
 19 544948b4-f50a-67db-824d-49049437b8de
 20 9e7e4239-9e6e-7ef1-8649-69144ca2d5c7
 21 793a07c2-e4c5-8b93-a50e-9b922a0ab05e
 22 599868ff-23d6-5c6b-a0bd-1a77b3620644
 23 97d19682-bd30-7e89-acce-32fe7fa4f8a3
 24 7308f594-2675-2928-bc60-e6cd191dc7d9
 25 4b9eeacd-118d-0c53-b79e-f5bdbd9d4118
 26 aab0d72e-5afd-76d9-bef3-98f0ce512439
 27 ce385e43-55cb-541c-9450-353ca9943bd9
 28 93a44e81-fd2b-875c-a0e8-6c32493d3ca0
 29 deca2716-56d9-5045-8dcf-3924dc8817fb
 30 06ad5795-888f-34b8-92f2-649c655fd819
 31 fcd79e77-1744-3667-97a8-c308b1f8c8f6
 32 3a5cb52f-c9b4-5a84-a145-790e70ca9652
 33 610304e1-209b-4f07-85c5-a58a2b882188
 34 f93cb03b-4e1f-230f-9165-cc91b09f4654
 35 a8457fa0-61b8-7b44-adb8-94146426a498
 36 fc3cced9-3e8a-56f9-bcda-1fbaf3398fc7
 37 c2450e95-963b-820a-affe-d3184ed04b8e
 38 72fabc55-7082-3a92-aa46-4879d1fddc38
 39 bbd10ed0-6156-074f-8d51-a7fffcaf8e0b
 40 1154d64b-429d-1aa9-99cd-a7665fb70aa6

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2451321320275154556785720758533542758301. Exactly this sequence comes out of new Random(851).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 3 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs