A858DE45F56D9BC9 archive

201302261508 19a0n3

explained decrypted filler

seed 882

Metadata

Post ID
19a0n3
Title
201302261508 → 2013-02-26 15:08 on A858's clock
Posted (UTC)
2013-02-26 20:08:58
Timezone
UTC−5 · title 15:08 against posted 20:08 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302261508) = adf8e96f93bae6de3e30edc728cf2f89 (name+title)
GUIDs
36
Filler GUID seed
new Random(882).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
44 · predicted N = 36 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302261508 (name+title). Key = MD5(password) = adf8e96f93bae6de3e30edc728cf2f89, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 546b7335-2472-49bb-9df1-44616d5619d5
  2 52c0d784-580e-559c-86cb-35b151a3bb78
  3 64724b50-1ed5-2645-80c6-7f090fe66530
  4 4c90d4d2-0de8-79ee-8b9b-c8d81e57cd1f
  5 9ecc217d-0e94-366e-a7ad-d2438968d539
  6 2d8a3251-5b7c-375c-ae13-e2db61dcd6d4
  7 834459ad-b330-045c-bc25-3e87b3e70a5d
  8 b8f2903a-2f98-81c7-9ff6-052c5e2d6442
  9 acee3dfa-e8ab-043d-aeaf-00b2ed27079d
 10 c45bf7f6-0982-4b44-ac64-7873e5c84cf7
 11 c53fd4c2-7f81-0700-82d3-8b2c0feba290
 12 8ba5aa74-d79e-05fd-99df-d29630bdb528
 13 c448a776-a1cf-8bea-a982-635ee0b4ce63
 14 1e18124d-812d-3c28-a671-5d5ca51e8d06
 15 13933b4c-abdd-34a8-b79d-a9251f828705
 16 3dd6e8b8-bbf7-782b-989e-117753b1d1e6
 17 6a7ef5d7-82cc-55a2-8c1d-3f499d2cd3bd
 18 94377f5f-6c2d-795e-bc84-ddac5a412c17
 19 689a7b9c-8f71-4976-a0bc-6b205123b0da
 20 7d78ed32-d1bd-7cba-a61a-c5db3d49a2a9
 21 4fb077b5-d720-066a-a477-87f95b7fea3f
 22 37f5a123-85cd-2ced-8a2a-19cadd641967
 23 28226218-7632-093c-80ba-a92351db1ee8
 24 69d02ff5-9aee-1d32-ab6e-538994df86a1
 25 575e7067-6fb7-1bcd-a120-62e650fc13cc
 26 eead200a-2ff9-7cc1-b2ee-b18650606e8e
 27 472ce0f1-5883-2dbf-8725-0523578fd6d1
 28 6adb0844-8d81-107d-8f8c-d0cbbbca4e2a
 29 b3a2344d-0e86-1cc3-bcf6-cc5b25ec75ba
 30 0e462ac7-cdf7-3d53-b8b1-ef3f2634d191
 31 b8347b9b-c72a-70df-8e7b-93afccd313be
 32 31b4beb2-e813-7f39-bd61-746c22ade736
 33 f84c4ec2-f032-8e5c-9962-7c01edf26be5
 34 b72ee9ed-a983-0e41-869a-31ac763061b5
 35 86f89358-2901-5c26-87b8-3b2a9ded08a7
 36 8e13ac0f-b354-837e-adcd-26c31b49226b

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 452733080400833757470201172113778058. Exactly this sequence comes out of new Random(882).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 44 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs