A858DE45F56D9BC9 archive

201302250714 196st7

explained decrypted filler

seed 196

Metadata

Post ID
196st7
Title
201302250714 → 2013-02-25 07:14 on A858's clock
Posted (UTC)
2013-02-25 12:14:59
Timezone
UTC−5 · title 07:14 against posted 12:14 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302250714) = 833eee7da99694b76bc14fb7000be9b4 (name+title)
GUIDs
32
Filler GUID seed
new Random(196).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
15 · predicted N = 32 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302250714 (name+title). Key = MD5(password) = 833eee7da99694b76bc14fb7000be9b4, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3721f194-220f-1d42-b55c-8489b7dcf6b6
  2 6ed65e5d-4b13-2324-b44d-1c63645e8159
  3 301282fe-e6b7-655a-a14b-74d0b24dc54a
  4 7e571a3b-176d-314a-a37a-e676281c9eaa
  5 f954dbb1-0aaa-6630-ba41-4b77ce1eb3d5
  6 0831d336-c997-7ec7-8541-3facb23feccd
  7 4ac4d90e-22bb-6c25-8159-b2ceda0dad0c
  8 4538c541-b882-6ee9-91d8-da7fbfd02539
  9 e0260b4f-fbb1-2e83-81e3-053f647d9c5a
 10 f8bba871-9542-472e-b47d-e4bb4ce6993f
 11 26029b1e-ec91-69ba-beee-c9652da0c259
 12 670ce9cb-3f21-4926-a4ac-deba78aa0a5d
 13 33dc25ac-9fa3-3f66-909d-b3f8cb2cf927
 14 61de17d6-c455-3572-81f9-4787288a7233
 15 bf7683b3-0f85-140a-83a3-77389a21fd56
 16 2fe7f273-96b6-38f9-a54f-90ea686ecd43
 17 b34dc30c-27cc-2b50-aa7a-49f6ac42778b
 18 b7bfdf93-c298-40f5-a641-dfafcf46637f
 19 f60da4e9-214a-80a2-a940-90a90eb1228f
 20 022ae06f-6bb9-1319-9f97-c956495ad054
 21 1f31733f-4140-7e20-a41d-68bb38ce2d24
 22 15fd7f85-19d7-8b66-bbc9-44cf7485b71d
 23 e6b4ca1f-240d-1f66-aa8a-8359b74c5cd7
 24 b24d342b-4a25-4fb8-a2d6-b4912cce48d9
 25 cf258305-6785-875b-88cc-1e1a566080f3
 26 54653c42-ace8-5ac7-9553-c7fb24674e21
 27 bd47facc-fbf9-4723-b436-b3c9c538659c
 28 f2915264-c0c4-1850-8425-4c6f7591942d
 29 0fe7c7cf-2b22-6a14-aece-05da630a4bc0
 30 343f732b-3bc1-8ac0-9264-f38dfd7f4ea7
 31 52958807-03c1-4348-8896-8577d317c988
 32 703cf647-66f8-07f6-91e2-9dddbfebd66c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 12636766246433132481781485416840. Exactly this sequence comes out of new Random(196).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 15 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs