A858DE45F56D9BC9 archive

201302250356 196n12

explained decrypted filler

seed 364

Metadata

Post ID
196n12
Title
201302250356 → 2013-02-25 03:56 on A858's clock
Posted (UTC)
2013-02-25 08:56:59
Timezone
UTC−5 · title 03:56 against posted 08:56 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302250356) = d0c485cb7ed023d6a439364bdfd4f56b (name+title)
GUIDs
40
Filler GUID seed
new Random(364).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
12 · predicted N = 40 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302250356 (name+title). Key = MD5(password) = d0c485cb7ed023d6a439364bdfd4f56b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c6fa95f9-8447-8fa8-9a91-9dc55c9adba5
  2 e2ec9a7e-83ce-55b0-9f28-8183281f41f9
  3 cbc7519e-1ff3-1ca6-8fcf-9f6a7caffd9e
  4 47b12b27-0774-2e5f-91c8-436fabf49b09
  5 e084f0d4-261c-40b2-9450-0bdbb6aac7c3
  6 407d0762-b9ca-5e14-8e1c-04f8c9fc76f0
  7 83ff8323-4e9b-8dd1-a726-bb08e71ca737
  8 47a345a2-e22b-002c-bda8-5d51c07aa9db
  9 3d8e2f2d-0371-0c23-8793-2779eefb61c6
 10 44612b11-65d1-4393-9e53-0fd275d5d7bf
 11 9942df45-b029-4f29-b0f6-d120375c9371
 12 a1e8e843-6bad-5b54-8a81-0124138ef271
 13 a8b3bebf-32ae-705c-b963-7709373c993b
 14 994dfd8b-dc73-7b97-b573-8fd45e2e8c8a
 15 225055be-fa41-651d-aba6-3d68d675284e
 16 c4402571-a5f2-35a7-adef-08efe7f83af9
 17 d93808d3-9b55-7802-84b1-bb4566ce3e50
 18 49ab098e-9be9-6dcb-b273-e2954d614225
 19 5c54b623-3dc7-48b7-871a-a98675b16c4c
 20 a501de6d-3591-2b07-86e6-fe99acc02700
 21 d9ac2a61-c9df-1255-b186-d78f17ca01e8
 22 b1b36454-4f54-1df4-ad4e-9f8c3d0726e0
 23 65c599d2-c723-44ac-b9fa-279143461774
 24 dc3fc837-91fd-1c23-8479-34cd8e1bbb3e
 25 acbc4037-f1a5-3d2b-b5ab-f21801cf89d3
 26 3fc233b9-925b-52cc-93f7-d158f56b02cb
 27 87b3a0ee-b507-7ab7-b04a-9ff2ee248132
 28 f04b3b57-1199-256b-92fb-9befcdee9f69
 29 6e1b4762-7a2c-0d77-97f1-db6d5610c38a
 30 73162588-6cdf-2ade-a0c8-d472e006e9f6
 31 1b2ab004-3019-50d7-9b19-14dd8ecd5a8b
 32 58eb425d-5edd-3475-a65d-0b20a677ddc8
 33 20a4fee2-da73-6ba2-8d67-5796c0cbb07d
 34 e60f8023-05c8-1c23-a704-6977232fa3ba
 35 37bc1602-12c9-6886-ad5f-8406e986ea69
 36 0e0fbf72-385f-43ba-8ab4-a19d01bf386a
 37 4cb6f274-308f-43dd-8800-6fd4b28d9760
 38 a7a9cc95-ae4f-4020-a3ca-04b320c5fe90
 39 f411f1da-9b53-6c14-bd17-57f89bcaf6b6
 40 30fd851d-7f84-53e3-a0c6-3495e6e7dc2c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8512458004457763764211413572025361644465. Exactly this sequence comes out of new Random(364).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 12 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs