A858DE45F56D9BC9 archive

201302262356 19b5wh

explained decrypted filler

seed 590

Metadata

Post ID
19b5wh
Title
201302262356 → 2013-02-26 23:56 on A858's clock
Posted (UTC)
2013-02-27 04:56:58
Timezone
UTC−5 · title 23:56 against posted 04:56 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302262356) = 1dccb02c329b07ad0e9c23bfbcb04b05 (name+title)
GUIDs
32
Filler GUID seed
new Random(590).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
52 · predicted N = 32 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302262356 (name+title). Key = MD5(password) = 1dccb02c329b07ad0e9c23bfbcb04b05, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 74fe456c-5f6e-8a46-aa50-6280bf632668
  2 9f57a093-79ba-8815-9cc3-f360f68d585f
  3 1e1eb3f3-3ee8-17e2-aa97-71feb6414ca9
  4 015ebd5a-3813-4ec8-ac0b-e86c84c215a3
  5 302153e8-4ef1-58f6-b553-2ab44c758319
  6 ea78cde2-5220-1836-8fbc-95ef204cb491
  7 3438d461-cef4-2aff-a55d-53f7e2ebd2a1
  8 cd0eddea-984f-35a2-b90a-1578caf219f7
  9 7da4f0bc-abe7-8635-b29a-f08285f0f534
 10 e03a92af-de3e-7e7c-863e-ec08eb87d823
 11 c65196f4-8549-8b71-87fc-e9ce07bd7e39
 12 0f0f5314-f600-0421-b4e9-076ae53da170
 13 bfea1eba-e531-20e8-b148-5c6abb36a359
 14 0cf0d833-3fe6-30e5-a374-fc10533801a4
 15 2aeafa38-3755-8d35-8864-912ada559ba7
 16 396df6db-3e44-4216-a995-5213374d9cfb
 17 bfc34ab0-d58d-73a5-a8e8-36136d133ffc
 18 b27f0092-189c-72d5-965c-aa7235cf96c4
 19 d292e572-194a-5cb3-8563-a0ae7bf77da2
 20 bed0a7f4-11af-68f4-aec8-acae58671eba
 21 04b6e289-9798-1f59-adeb-0215a762cde5
 22 1647e23c-82d8-5ba5-92a7-0b96f7aad8e4
 23 7d994e4a-835b-6e73-9e55-1e8adea8209c
 24 080426ec-7265-1312-a451-c6956f85a413
 25 1ff55990-d7fa-4831-90da-e6ae7acb5357
 26 47a98e5e-fcf9-01c4-96c7-0fe953a6b234
 27 08957fb9-91c1-1ede-a780-32c045555726
 28 aaeaecc9-e183-2614-b5f4-d393fb4ac5c8
 29 f3d57eeb-0a5b-48f2-9183-b9088a0a0407
 30 bf6f8c5f-77aa-2afe-add8-125dc7067df3
 31 9c6304e6-644d-0e82-974d-6552c0a2f817
 32 ea1aa9a5-49a1-79e5-b3ef-ec5b4fe20246

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 88145123878023847756156140124207. Exactly this sequence comes out of new Random(590).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 52 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs