A858DE45F56D9BC9 archive

201302261150 199ltr

explained decrypted filler

seed 8

Metadata

Post ID
199ltr
Title
201302261150 → 2013-02-26 11:50 on A858's clock
Posted (UTC)
2013-02-26 16:50:58
Timezone
UTC−5 · title 11:50 against posted 16:50 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302261150) = c6f5b352bfbc2dfca62fcb2a9bbeea7b (name+title)
GUIDs
36
Filler GUID seed
new Random(8).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
41 · predicted N = 36 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302261150 (name+title). Key = MD5(password) = c6f5b352bfbc2dfca62fcb2a9bbeea7b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 522c3811-b331-83b0-b234-a8dc96cd9aae
  2 6cd2b18b-30e6-18db-9b82-13fad232792c
  3 a1290035-d2a1-3db8-bc0b-8b5706660f83
  4 dcc167a5-85fa-209c-87fd-f9e55ef72f46
  5 be052d77-f8b4-7bc8-93a7-55b53e5508a2
  6 52773346-ef28-4552-accf-2936a9522f58
  7 6294cb43-0e3c-4c7b-9af8-73d02d626235
  8 70d17e2e-3cf9-42e4-9690-eed853b2bee1
  9 52e0639c-38f3-8605-86e4-7eb3a61c0a62
 10 bca53bd3-30a7-2fd1-9deb-7e5b318b9b3c
 11 5cdd3cae-e5e4-1fb5-bdbb-9085e8e4aaf5
 12 aae68116-8ab1-6b9b-8403-b3babf4df178
 13 7eec359e-05d4-1879-90e5-3e5ca7ce7af9
 14 92c064be-141b-5127-aaab-4274b192e49d
 15 c2c729b3-5a0c-52be-bed8-c6f360046f6c
 16 13eedca8-32a9-091d-b1e3-c89b66a17f2c
 17 5342e032-6740-21e3-b7ae-4e6152cf95ab
 18 a96679e0-b780-869a-8783-6b135436c01c
 19 99055265-32b5-8a16-9dc7-5c1f1aaf429f
 20 108f2002-4a91-3ea7-929a-1d5eb3b93a20
 21 d30ad86d-b5a5-7209-b30a-c56be77d8f54
 22 b37145cd-4410-76e5-b0a6-d213891bee59
 23 16c196a8-3214-3b96-a63e-44641e64ea6d
 24 1c0398e5-7b5a-79b8-b5d6-e2d47c82f6db
 25 bc85e8dd-8cfd-47ca-8a3e-a5079ed33c39
 26 3fecda1d-227c-686a-abf0-a42683c01f0d
 27 a513448f-195c-7dd4-8eda-4c8d31fb509f
 28 cecf9baf-84fa-563c-b97d-0c1f3bfa9fa3
 29 06623fad-525e-63ae-8088-1b9820d32088
 30 ff9c099d-40db-4eb9-bbbd-ea63631d089e
 31 dee60758-170c-10d5-b2f5-baa5c24a2849
 32 7919e8db-c17c-5412-a89a-35da3ca3eb61
 33 96c314b0-9de8-4d7f-a98e-8c01679c8e74
 34 cf984903-0e49-165e-a0ab-0d14fbdd406f
 35 014f9441-115f-3fdd-b013-eeb1794b08fd
 36 21bb5592-33f1-074d-953b-1f0ec35be257

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 813274448216155028837737467564154130. Exactly this sequence comes out of new Random(8).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 41 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs