A858DE45F56D9BC9 archive

201302271944 19d4f4

explained decrypted filler

seed 733

Metadata

Post ID
19d4f4
Title
201302271944 → 2013-02-27 19:44 on A858's clock
Posted (UTC)
2013-02-28 00:44:57
Timezone
UTC−5 · title 19:44 against posted 00:44 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302271944) = 632aa0a49e03b15b0ec3892b80030655 (name+title)
GUIDs
40
Filler GUID seed
new Random(733).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
70 · predicted N = 40 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302271944 (name+title). Key = MD5(password) = 632aa0a49e03b15b0ec3892b80030655, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 abcb9846-98d1-5d71-a5d9-2aa590e9e25a
  2 130b7c67-dcb8-892f-96b5-bc1ec352a4fb
  3 bea54ea4-8b94-1b3c-850b-cfc312a00857
  4 0e22ebbc-a9a6-0c2e-99cb-3319f2dc94e0
  5 4e8097d5-2223-13ce-8160-35b43752cd5d
  6 54009b58-344f-15d7-bd8e-879a719e24a0
  7 8cd879ee-17be-2033-8afc-cb8f85d84c31
  8 7432069f-8706-15c5-9d03-fe625fd1a745
  9 ae18fb75-a3df-5ba1-b0c5-7f5b37906c18
 10 4faa7464-caa7-570f-91fc-2e89ec2e22a7
 11 8fcbb75a-83bc-2104-b002-ad9eaf33d335
 12 a4e7a8de-275e-6024-a226-352fe4fd2991
 13 98625f3a-862c-4de5-ab56-770b175209f9
 14 1423fb26-ec0e-7aed-98c7-ced12a10ef77
 15 fe87a7db-45cf-0992-b344-875364d40ea6
 16 6f94be7f-7f94-7321-9750-4be402f804f6
 17 6b39d7a7-adca-86ae-826c-338abafce3f1
 18 c3d13a68-3653-40fe-8fb8-30d5d3ae1c51
 19 1cb60e7f-ea3a-40cd-87e5-4df4465fd31f
 20 bb3dbe4a-0363-19be-8559-54a86f0a12e7
 21 00c88d30-2bb8-151a-9e1c-4abb94923d6e
 22 e4377743-5eab-63d6-9b49-9e0ede3b6fef
 23 8c8df51d-943f-74dd-a40a-4d25e973dde3
 24 1c3fee8d-01db-0661-801d-a89b78504e6a
 25 4816b206-d288-4c37-92fe-8553157116fb
 26 876b5ea0-66ab-813b-9369-c859d87a49c9
 27 95221149-e130-1534-90ee-d9cb811e466c
 28 dc69667c-d8cd-7580-b4ee-585788b2b2a6
 29 9d1111ff-28be-0fab-a3a1-f641d4a820aa
 30 b3063f25-922e-383e-8387-ce78b606a34d
 31 66faf2d4-014e-7633-8a71-d57b17bf49f0
 32 96d7c3f6-e1f5-4708-aa9c-d52567e3a531
 33 9a40b2ae-42f8-03db-84f6-e8c34e058772
 34 d33bfad6-1442-3a77-82ed-39ecf97a7a3e
 35 706500b5-56eb-55cc-9c7b-c6845680989d
 36 0f85b90e-afaa-4941-bb27-9f097ef1c3d6
 37 efe3419b-9738-11c1-87b7-9804a10b1c16
 38 ed8d874f-4c2f-84aa-a119-d99d12042b41
 39 2c584beb-2f84-72b0-bb82-a9223fecb7ef
 40 f068bf24-ceff-168d-918b-bd9e278c91f5

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5810112155264707844116704817037403541871. Exactly this sequence comes out of new Random(733).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 70 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs