A858DE45F56D9BC9 archive

201302272156 19dekd

explained decrypted filler

seed 615

Metadata

Post ID
19dekd
Title
201302272156 → 2013-02-27 21:56 on A858's clock
Posted (UTC)
2013-02-28 02:56:57
Timezone
UTC−5 · title 21:56 against posted 02:56 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302272156) = 4a4ff7bccea3c8936380cbc30c8ce1c1 (name+title)
GUIDs
36
Filler GUID seed
new Random(615).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
72 · predicted N = 36 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302272156 (name+title). Key = MD5(password) = 4a4ff7bccea3c8936380cbc30c8ce1c1, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a41cb6f9-8bf1-0ee8-b0e6-337317d6387f
  2 d9a77348-9218-26aa-bebb-1cf4eff41bd2
  3 b081755b-f019-51d0-8632-b1c55fbdc737
  4 c066569a-cb4c-76a1-b092-aa6fec945594
  5 209463c4-c021-7ad1-a074-776046f0d46f
  6 621210be-fdca-0f48-b6d4-22f48d0f7c64
  7 df03301e-feba-4f7d-8577-3367568b9578
  8 ee863f43-90c7-8995-bf96-e024914b56ac
  9 6d4c6463-d4bf-016f-afe4-adaef1923037
 10 fee33424-b942-0436-92de-77f2a08c941f
 11 226b2e63-35e1-3acf-99c5-94d7b6e843bd
 12 fa12893e-eb5c-58b3-aab1-a9f8cc15541f
 13 b6ae0cc5-e7a6-30cc-afe6-0435327396f9
 14 9af0f4bf-d4ce-3724-ab5e-c1bb929cff15
 15 2258b32d-5e59-48a5-b886-d6179d2a4629
 16 9ef0fcaf-5f63-086f-b655-b4a5803ad73b
 17 bccac55c-e246-312b-8ae7-1330d7df1732
 18 6d218563-732f-2999-bcf7-994aab3d2c34
 19 c167fd0a-be7b-2aba-9080-4708a15e27a3
 20 eb57b6de-6286-4d09-947f-190f0de5cb29
 21 a54f5630-4c8d-4282-9ee4-28f3a95b3ea4
 22 dac5209f-70ce-6113-9268-141d0dda4db0
 23 aab76145-2abe-8861-8213-8fa819d7b68a
 24 67484ece-35da-7aa2-ba57-2a4c7e63bdff
 25 ae27a79b-7d51-82ea-b8bc-42291716d9d8
 26 1d551da6-b65f-048d-b1df-5a526a9f208c
 27 8f79c90b-4bdd-61f1-87d8-3c229b0c879b
 28 b541bc14-05f4-601c-8351-970d0c71e41e
 29 afe22da1-f5bb-3757-a8ca-0c2426310a8e
 30 0f232a57-afd2-34d4-b00d-05e2e3dfc6d6
 31 04b1f92c-1f00-2f3a-9b14-883415ac7528
 32 51214369-3eeb-47e0-9288-8f4f3fa4660a
 33 fefdc179-520d-540d-9d2b-db1c22499ad8
 34 b9a044bf-a430-358b-8d48-2a0ab99a0464
 35 708a7aa6-d9f7-38ab-a607-6d239b3ca145
 36 a2e2ca97-f9d0-358d-be7a-ef9301c25852

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 025770480035334032244687806633245333. Exactly this sequence comes out of new Random(615).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 72 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs