A858DE45F56D9BC9 archive

201302281108 19egbo

explained decrypted filler

seed 929

Metadata

Post ID
19egbo
Title
201302281108 → 2013-02-28 11:08 on A858's clock
Posted (UTC)
2013-02-28 16:08:56
Timezone
UTC−5 · title 11:08 against posted 16:08 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302281108) = ccc2ef60217c8746a2ab1ef942a9ca1f (name+title)
GUIDs
40
Filler GUID seed
new Random(929).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
84 · predicted N = 40 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302281108 (name+title). Key = MD5(password) = ccc2ef60217c8746a2ab1ef942a9ca1f, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d631e0c7-8884-028b-b300-c7d0184781df
  2 de956515-9321-3c98-b911-442831e70aa8
  3 f0b00405-4522-1961-bd2c-768aca912f0e
  4 35841dca-60ac-7e7c-828e-42df922db889
  5 4e71978d-0800-57c3-a87a-261c6cd7a585
  6 20050c48-2a6f-34b6-8fb3-aaf6f5e9af30
  7 2aac72d7-1c45-14e2-8046-8641c18c4481
  8 bcebc053-ce8b-48e6-b527-2f7ec96da678
  9 aa9e23a3-e986-8f10-92ea-ec4657e2f407
 10 05d8acec-4b7b-7613-83a2-4b8d1e029210
 11 2904b91f-3e53-641f-918f-af5f62bbde3a
 12 dc15e519-bf8d-6e8a-8330-807e0bf6c408
 13 4c577d8e-c8eb-2075-b1bf-a0848e442aba
 14 571140a9-b4ee-7041-a511-7f31ef833520
 15 71b276d4-6433-239e-8e9b-7d8af545d85a
 16 7a00cbfa-acb9-1154-8c54-7e42831137ec
 17 692c18ea-d9eb-3c67-8ccf-6a0a0b8588e4
 18 116145fa-bb4e-8be2-9d85-062a0c11bbc7
 19 9363788e-879d-7212-8196-c2aa94d2e227
 20 1e52c38b-df3c-0410-9b14-75b364178397
 21 befc5703-ff6d-2cff-8f76-b08ca5261270
 22 d2263adf-6e23-65b9-9d69-2609fed0d57d
 23 8bb878e7-2573-8a84-a83f-a594a5ca10f6
 24 f7a2a7ec-ec43-53d7-8486-46fea3e13d58
 25 db88439e-fa2b-65a3-806c-d78a53267710
 26 441743ac-651d-02e5-b286-dab27847968c
 27 93de5876-f008-5d43-9b09-d6fec0627e8d
 28 651acdae-dcbb-2fd5-9670-770f1cfb7069
 29 07eecb16-a863-1f5a-9a2f-cb31ebab0f34
 30 e021efc9-a98f-2ab5-8774-0ce446b3b42e
 31 8668b764-7ddd-17b1-80d0-9c6c5f109b0d
 32 b7943811-635b-1d48-9b1d-8e4f3db0a242
 33 a6fd1428-b204-70ab-8a24-1b0178fdf991
 34 3eb9f6d6-f308-2e06-abe2-ab50c2234102
 35 847e5af0-0c19-0299-9718-865ccf12551a
 36 6311285a-5932-054a-9a2a-8f0ecc7143f3
 37 4b36b897-7df9-5247-ad48-3eb5814897f3
 38 1225fc58-870a-439d-bda4-cc53dce9b3da
 39 03bc5ea2-0132-37c9-ba2f-14cb0c9af421
 40 2d3f9a73-2e64-4406-892c-937bbbe82632

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 0317531487662721387026856052121172005434. Exactly this sequence comes out of new Random(929).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 84 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs