A858DE45F56D9BC9 archive

201302242332 196a8p

explained decrypted filler

seed 589

Metadata

Post ID
196a8p
Title
201302242332 → 2013-02-24 23:32 on A858's clock
Posted (UTC)
2013-02-25 04:33:00
Timezone
UTC−5 · title 23:32 against posted 04:33 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302242332) = 89215fb763df66ecab3fc98134da2938 (name+title)
GUIDs
36
Filler GUID seed
new Random(589).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
8 · predicted N = 36 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
7 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302242332 (name+title). Key = MD5(password) = 89215fb763df66ecab3fc98134da2938, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c0e60cf4-1695-3a5e-b1c6-36b982f94494
  2 cda110d9-ef07-569b-8e97-db7c6c1470cd
  3 257571f2-5478-4df7-a63f-0d4824be1ae2
  4 1647a955-1f64-2325-a8b9-b4023432b490
  5 29625173-520f-15f1-a872-ec57b7257773
  6 59dc1c81-f1ad-2f43-b725-002506d3963a
  7 6e5b501a-a5df-7001-b16e-50a6f553f836
  8 a6acfa5a-9926-8a25-a849-29683ed121fd
  9 f55d83a5-a4c6-7839-86f8-7d4e0d9db404
 10 2102effa-8d47-40c4-91bb-771160097710
 11 41293e81-d240-2107-815e-71b90aafaa78
 12 8e2639ed-b05f-2853-9c8a-2ebb4715bc06
 13 7afe9f43-1819-4c95-9f17-56ed33168324
 14 5a0cadae-75e2-8949-9ca7-0ca0a0da2463
 15 e6db2584-f21c-2fdc-9e3a-4b2ffecf0246
 16 6c249a29-9335-7ecf-addc-600f82d67ede
 17 9fad4808-8a71-4007-835f-738308d31465
 18 05ad326b-d247-12a1-950a-e0640fc8748b
 19 fd9694de-4d0b-5cb9-b7eb-edb0326ad888
 20 269e127a-4d31-3e69-89ec-d689c8af7b91
 21 1dd2b312-1ced-0bb1-9832-e353b937c520
 22 67610555-161d-3cc4-8bc9-b8513b0ab969
 23 2751c3cb-9354-4074-94d7-0867200a4a0e
 24 e03fad34-f29f-7737-8a6b-f7ce1afcbb43
 25 cbd1a951-b2cd-3171-80b8-c09f1657aa36
 26 ff519003-ac5c-34b9-bb13-bea262b464e5
 27 40b55638-e9a9-3552-9ad4-22d8f078764f
 28 e9a84833-a12b-549f-af03-1132c123214e
 29 9b250017-90cb-2c8f-8de5-5d9782278f4f
 30 75239752-4df0-3681-84b0-fb77fdfcf614
 31 59bb9d5d-bf7a-5f5d-bc3b-2f1fe73e8845
 32 d9820034-c5ea-5042-a9fb-15bc296e72e6
 33 0f16661d-c158-1397-955d-13af869d45ef
 34 a7f07018-500f-6654-ac17-fa93b57c20b3
 35 a770fb63-43c3-2d70-a4c5-2dbfb0d3c800
 36 6950ea7a-7a71-2fac-9ddb-3e8ea5652321

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 354212787422482741530347333523551622. Exactly this sequence comes out of new Random(589).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 8 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs