A858DE45F56D9BC9 archive

201302270950 19bueg

explained decrypted filler

seed 147

Metadata

Post ID
19bueg
Title
201302270950 → 2013-02-27 09:50 on A858's clock
Posted (UTC)
2013-02-27 14:50:57
Timezone
UTC−5 · title 09:50 against posted 14:50 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302270950) = 3e75d4c538e620156a0074e84c3cee8f (name+title)
GUIDs
40
Filler GUID seed
new Random(147).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
61 · predicted N = 40 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302270950 (name+title). Key = MD5(password) = 3e75d4c538e620156a0074e84c3cee8f, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d5fae445-0510-4810-bf16-721ad75a43bc
  2 c75d676d-f1db-8092-a20b-be872decc334
  3 ff05fc14-ec2f-4635-99e2-c6cf60af6700
  4 4944cd8c-084e-8bf5-a9cd-ab8ca119fbb4
  5 401aca83-ecf1-5496-b6a9-79e4c58d7154
  6 df1df82f-3691-0a56-8322-33bf35d136b6
  7 e86d0f3f-7ea6-6b04-9167-b822a2034885
  8 68c3fa03-0c53-1318-8b20-876196600644
  9 40068c42-8344-1341-8c3d-d40a4926bc68
 10 16459600-ed1d-4068-ab4d-44a0567f57c6
 11 9c6c662d-ee17-5610-ad1c-99dc31353d4d
 12 f58bd479-39d8-27a7-aba0-a805e5f0058b
 13 d82b798e-d58e-6897-bc33-caa3ba446b11
 14 5c4b6476-be64-8f79-9d2d-7793f2730c6d
 15 19631b94-68d5-7fed-bed3-0913df41917c
 16 605b502e-8b4f-7b57-96a3-209fafc35f68
 17 fed449ef-e8c8-57ef-a1c7-e39d573fe1f8
 18 fad3bd0d-5201-19b0-aa13-0363eb4e6f38
 19 ee595f2d-0ee8-5446-b3f5-66ef736aaba9
 20 1bc4143c-4397-2efd-adcc-facc33afc752
 21 42115687-9b5a-3790-be64-f468acde37b8
 22 49f9d57b-a683-87cc-8f4e-c06e21031d40
 23 00e6b539-3e12-757f-af5c-20f1acb0a61c
 24 27a55481-b688-314a-94b0-1042389e9d46
 25 a006b8a6-93d0-0ead-9524-54331ed1a2c8
 26 0dadbc42-15e6-0ba8-b5a4-73bdd891574f
 27 0675065d-0f7e-2f0e-abef-a752eb6f7e58
 28 d547aa88-d0d4-6634-b36c-f49faa4917c8
 29 84b5e0bd-52f3-18f7-9580-5b2ecbc6e20f
 30 938b4bc6-33aa-4925-949e-6ef7732156d8
 31 e643a8f7-7a58-45fa-aab0-59cef750d392
 32 e741140c-9212-1e42-84fd-77105b6302a3
 33 c7f7e7b8-1511-3349-9ac8-5c20d5ba7a17
 34 d4c7ae77-3772-6c4e-990d-fba9985c4346
 35 d09b008a-2616-8214-9d41-2241e819b6be
 36 1a8f5d81-1f0f-194e-bd64-bc7ba8d5cb53
 37 dfeefbe4-70c9-7dff-8e84-9c50db49c1fc
 38 dfee52dd-69ba-5d6d-8622-59320af5943e
 39 97e2acf3-aa98-4ba3-a62e-5cc1bebe4157
 40 feaab76d-083f-33ff-ac60-35a2bbaec2b7

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4848506114526877515238730026144136817543. Exactly this sequence comes out of new Random(147).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 61 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs