A858DE45F56D9BC9 archive

201302251456 197k0o

explained decrypted filler

seed 836

Metadata

Post ID
197k0o
Title
201302251456 → 2013-02-25 14:56 on A858's clock
Posted (UTC)
2013-02-25 19:56:59
Timezone
UTC−5 · title 14:56 against posted 19:56 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302251456) = e406ea0c7a44320230e6c919a457413f (name+title)
GUIDs
32
Filler GUID seed
new Random(836).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
22 · predicted N = 32 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302251456 (name+title). Key = MD5(password) = e406ea0c7a44320230e6c919a457413f, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 29853c98-294e-4743-ab41-07c0b7d0b3de
  2 799bb42f-7fed-155b-a851-d9799860c3f1
  3 c4fe5fbc-84a4-1a69-afa5-34532f90dc3c
  4 31a442ed-292c-815b-9618-1447cc794405
  5 d0099a0e-2d57-5ebe-913f-8dd7d1c44c48
  6 1b5cff9a-a0d5-1a93-8a8a-97a826c5937f
  7 7b8725d8-4089-41bd-a1e5-3439e57ac6fd
  8 47385d5b-74d2-7f47-9237-3729bc69fac4
  9 99ffdd4f-a374-383f-a5dc-f392cd01486f
 10 98fa62de-64cf-4a96-b031-a2ddfea89aa8
 11 2b730875-ab66-1023-ae65-29b9634186ee
 12 59e59a52-4c96-1836-9acd-084e5ca14c37
 13 a9237d8b-6045-37ae-b9e0-0ff33bb3e219
 14 448364c8-b5d1-3c88-833a-7c340dbc4c74
 15 df636183-720c-1c35-a5e9-24553d38815c
 16 11532e78-797e-1734-9f2b-5ad898afcf73
 17 195eb272-c34c-2742-ae14-27a9785e3146
 18 43186081-096f-2052-a089-5b89f2b41911
 19 36f80225-70c3-2d99-a0a1-ee35265777e0
 20 8ddd9ded-234f-09d6-8958-911fe0eecf4d
 21 fa556281-1d6e-89fd-a176-2e5ab6485efd
 22 4cca8cba-b008-8787-9e6b-1eb47190b308
 23 f1eb350f-3800-2c36-9f78-d7335fc12d92
 24 b44a53fb-37e9-01f6-9b94-0f2a33052ec1
 25 b0f7a15a-e92f-514d-9584-42bcbe9b6356
 26 b0410105-ad93-208e-a23b-129b1125a4c4
 27 660c09b4-803c-6190-b256-3dcd44d354d4
 28 5a19e7df-21ac-68d5-b8a0-3931aafe2b28
 29 54edbbb6-74d1-4ac5-92a1-8893236f8a83
 30 54f35b21-96f7-3f00-a798-4a8ba33ab324
 31 797001fd-0a04-7204-9c03-0d42ad1a6f20
 32 7b94c3a6-e9ae-5e73-b5d2-d919f4185f02

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 41185147341133112220882052664375. Exactly this sequence comes out of new Random(836).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 22 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs