A858DE45F56D9BC9 archive

201302260938 199dfm

explained decrypted filler

seed 93

Metadata

Post ID
199dfm
Title
201302260938 → 2013-02-26 09:38 on A858's clock
Posted (UTC)
2013-02-26 14:38:58
Timezone
UTC−5 · title 09:38 against posted 14:38 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302260938) = 46bcd58e30205ccb61e5677fe6c9a288 (name+title)
GUIDs
32
Filler GUID seed
new Random(93).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
39 · predicted N = 32 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302260938 (name+title). Key = MD5(password) = 46bcd58e30205ccb61e5677fe6c9a288, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b2fc9b79-b11b-2c54-8bed-2220a9ab3acd
  2 5da62518-962a-072b-8585-56256b114839
  3 72da94dc-805f-67ef-a248-8ede87a46ed2
  4 61d306cb-f3bf-32be-bf95-d86436e6ec99
  5 baea375c-9774-1cc4-af23-5d7f08ed3ae7
  6 18ac2b52-74e3-7900-9459-cbe4f9869d47
  7 583e1cea-a3e5-534b-88f7-4ccca3ad2b15
  8 cc2cdfda-5607-03b9-afda-cb247485e8dc
  9 fb44338e-75fb-42f1-ad07-e8e5f7b838c0
 10 009e725c-45b3-5c78-9d43-e03bcdf493e1
 11 6d0df4f7-c6ce-7b63-837f-bc6c3c2b6ba9
 12 897dece0-5b8e-01a6-8980-8c5f164ff324
 13 23adc828-087a-5544-aa45-c89cbee28e36
 14 981bfa14-3ff0-7108-a5f9-f917305ec6d9
 15 4e21dac2-5a4b-017d-92d7-d60d8c50646d
 16 dfaa4d4e-13d4-0f75-b840-b66b57b17110
 17 9c304835-c6b8-86bd-8b4d-488cae6234ee
 18 47bc5ece-ba89-56e8-be74-a507474c2505
 19 dbf26cdc-7cb7-1b64-9b7a-f8cc72db33f1
 20 3724efe8-8fdf-2ce9-964a-8d0a6e9256a0
 21 ddf9f8e3-67a5-15a7-a4af-f802a4d21e97
 22 d380c471-87d1-51b3-bced-a77f422e6c40
 23 f7c5dc0c-c591-6b49-90c1-6f98c67bf0aa
 24 b3af5626-82df-40e2-b196-f8a78e30044e
 25 bf769117-3e56-7310-b483-be51f7b66481
 26 2f77ac4f-917b-3ba0-8676-35c629d3b748
 27 74b11dfa-032b-896e-b218-78c6ed3b7e30
 28 c6d96a88-2ef4-201f-8873-e529b7f63ece
 29 d9e8893d-b888-2660-bf87-fb21999aebf8
 30 5bb717f7-523d-8e22-84d4-f2382532b941
 31 733c793c-c160-4198-8a67-65db999b9e6f
 32 6f550238-ece6-8b4e-aa22-be1acbf1ba0a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 20631750457057008512156473822848. Exactly this sequence comes out of new Random(93).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 39 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs