A858DE45F56D9BC9 archive

201302280538 19e238

explained decrypted filler

seed 208

Metadata

Post ID
19e238
Title
201302280538 → 2013-02-28 05:38 on A858's clock
Posted (UTC)
2013-02-28 10:38:56
Timezone
UTC−5 · title 05:38 against posted 10:38 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302280538) = 710ba50e424b5d428b79c898a1b8c568 (name+title)
GUIDs
40
Filler GUID seed
new Random(208).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
79 · predicted N = 40 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302280538 (name+title). Key = MD5(password) = 710ba50e424b5d428b79c898a1b8c568, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5c199f69-db44-3f0f-a3c3-a521e39c6234
  2 8735df7f-df23-7a91-8cc1-3506b1658046
  3 ea8308e8-2af8-1eff-b451-f799ecdcc75a
  4 51bfb325-87db-8f99-a947-0c056b495bf2
  5 a233261f-1b1f-1788-9dd2-9fc77223e386
  6 72daf037-2cc6-2e7f-bb43-ef3211a4c32e
  7 c9fd4197-493c-08cd-892f-78213c94cb81
  8 4faff725-3d5d-79a8-92b9-638e25758d6f
  9 bac9af04-e369-6445-b671-3704eb3ce554
 10 0f5ec5cf-241d-8ad5-8247-aaeddedb2d0e
 11 6ef14f4f-c294-4fc0-b4d5-ba952ab1fd94
 12 699a8663-41de-7d6b-9eb2-645dace8c703
 13 c6464cf1-0550-5a72-9261-14594888cdec
 14 676f9778-0297-63b9-af22-e63f97b4e656
 15 40666e65-4e1c-5535-a9fd-333befc81d79
 16 6b9d2701-6492-81bc-ae3e-99bb2ccf57fd
 17 755380c4-30b7-2f3d-b9db-b4ede91f080e
 18 db5c8580-f308-80de-8e4e-ac01c43efabf
 19 6fcd1a34-3317-25c2-bc59-c32eb7d0e8a4
 20 4713148e-5792-774f-89ac-c5c96f93aee9
 21 4e9b9ed9-fec7-494e-8e8c-809875b0aa95
 22 62460b3d-e32f-7df4-b5fb-f885c5b9e8ab
 23 9c3a0c1c-aae7-16a0-9832-43851415c03c
 24 c71b1de5-94d0-6d96-aec8-39ba27d6d069
 25 bc9dfbf6-160c-0029-b0fd-8a951883ae25
 26 cd85f2a6-3506-23ae-90d6-91dae2e94718
 27 598b114f-9511-6e3b-a185-b2048fdc60f2
 28 118fb04d-07c2-5649-b748-367c7c4803e7
 29 82900ee2-d119-8681-b08e-2d8a653d1aca
 30 13ee82a5-988f-5bd6-8653-5938b8f9a379
 31 1c44af28-ff7f-8be2-a4af-f5b301bfda01
 32 91e31cb9-436f-2d11-9c3b-0b79d2f34a2b
 33 0a27ffe4-a008-8673-8570-a981bdf128b8
 34 7b614850-6475-1c8c-8859-5737c25518a0
 35 7303e131-ffa5-2ca0-807e-c0d2514704b9
 36 9edfae88-cb46-60af-8875-f391aaec68e5
 37 d23c58b5-8078-2dd4-b77a-5958f1bc8636
 38 6e4e79a0-f9f9-1000-8d91-bbaac9b4379e
 39 2325a8be-df32-87bd-b0ff-2aee5cfd384f
 40 624c9376-d39e-04ce-ac49-27ada4ca0942

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3718120768475658282747160265858281262180. Exactly this sequence comes out of new Random(208).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 79 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs