A858DE45F56D9BC9 archive

201302261614 19a5xy

explained decrypted filler

seed 858

Metadata

Post ID
19a5xy
Title
201302261614 → 2013-02-26 16:14 on A858's clock
Posted (UTC)
2013-02-26 21:14:59
Timezone
UTC−5 · title 16:14 against posted 21:14 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302261614) = 393d4873bfae085cb75991f2abc639a1 (name+title)
GUIDs
40
Filler GUID seed
new Random(858).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
45 · predicted N = 40 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302261614 (name+title). Key = MD5(password) = 393d4873bfae085cb75991f2abc639a1, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b8760c41-6477-8fe0-94c1-a58ee2db4198
  2 32d0acfa-eb5f-5064-88a3-6faec26250d6
  3 c7af1e56-103f-4d69-80eb-aeea43efc940
  4 724eee48-6403-6a65-94bc-baa272eb9dfa
  5 d386235f-36cb-5605-ab84-20ca94461f79
  6 cfdf57dd-0dba-3113-9bf1-7e971ad158d6
  7 9baa8716-f775-348c-aba3-05a9c74548b9
  8 fd11023c-1519-7e90-a2e6-c7bb683f1e1f
  9 1b125e5f-6fb8-118d-ad20-2c7806482279
 10 e3bc5b56-f777-5743-b3ff-0e7ee5180678
 11 11a86a92-b5b8-3dcf-a0b4-3050afe58538
 12 d026810d-bca1-2ddb-92d6-52f05b685b7f
 13 0843f2b7-1c71-4d0e-ae2e-71cc5812119f
 14 f456dd31-1f4d-73f1-aefb-53a276f99848
 15 57e2c6b3-7228-5523-8aa4-37f4edfdbee1
 16 fe628e32-ba6a-79fa-9d0d-e357d2abc84a
 17 61812ae8-2d98-4ea3-9cb0-711997e090ee
 18 c7f44894-84b7-8cc7-b5fb-7f0e0097842c
 19 3fa1dad7-8f36-8438-b508-5045597435a6
 20 97719296-d19e-4ecd-905c-af764aeea8e5
 21 c4795b31-f59b-7178-a92a-90a38452086b
 22 12ec2f48-05fc-3080-b503-61d91b0ba53c
 23 06f1b538-51b6-8425-b9ca-76a3ddec8e96
 24 81a7f6af-d376-6a55-b2c6-b59874ed7c03
 25 ddbbb6da-3f44-7b87-bfbf-4f888ee82570
 26 0b67abe9-e4fa-3d65-8aa4-cea113923e6c
 27 3a09c52f-3b12-52dd-895a-f39f682bfc02
 28 8e663b52-ba33-23ed-a07a-d801177d9bec
 29 d2b7d81c-2555-4a37-80dd-e2e854c2bfce
 30 da9ae17c-f9dd-08a3-8b28-e9fe62789491
 31 bef4f55d-d5b3-8b30-a2ad-e04f975db70e
 32 8ea24663-d518-4d3e-8771-7b3eab29219d
 33 0f7efc93-80db-29d5-b554-e55d8d6694da
 34 125b7f6f-12cb-4a61-ab5c-917c8a468bc5
 35 54b9f35b-bbdb-2697-b179-6a38a933adf0
 36 9b732cdd-a6e2-86e3-a026-99c620f7741a
 37 5d5a91ef-0836-6d64-a2b8-a706e1547411
 38 4bf72a5b-9a8f-0513-9982-0e767634a2ca
 39 b363ba7b-8690-2b6a-a33b-e49f8dbea43b
 40 2d002ce2-3ac6-16c2-a5b2-407701af9444

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8546533715324757488473867352408424286021. Exactly this sequence comes out of new Random(858).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 45 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs