A858DE45F56D9BC9 archive

201302281744 19fazv

explained decrypted filler

seed 606

Metadata

Post ID
19fazv
Title
201302281744 → 2013-02-28 17:44 on A858's clock
Posted (UTC)
2013-02-28 22:44:56
Timezone
UTC−5 · title 17:44 against posted 22:44 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302281744) = a3ba0a99cd2f3662a363415135edf53a (name+title)
GUIDs
36
Filler GUID seed
new Random(606).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
90 · predicted N = 36 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302281744 (name+title). Key = MD5(password) = a3ba0a99cd2f3662a363415135edf53a, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 80134897-d04c-279a-964c-77254638ff00
  2 5d0d6e83-a960-5e2a-833a-13e71aee16ea
  3 328ed655-dd68-3b40-9b4a-7ff5eb00027b
  4 cda38c19-bb0e-8b15-9642-19119134a199
  5 fa877134-f395-75cd-ace9-53dc909365b7
  6 214ba22b-6f4a-1b86-9fdd-28415424aaf4
  7 ab51c09d-3d62-3acd-a8fd-7d1b0d01efdb
  8 d2caaa5a-57e0-4c95-831c-c77de9cac33c
  9 a3b041e5-40b6-862d-9331-86e4ec711228
 10 2f88a438-b5a3-672b-be39-71430266d74c
 11 b800ae44-cdd8-6e27-b3c4-f57b994d60a7
 12 8e6805a1-15d9-5293-b784-b5cd03dfecad
 13 3fb0f202-217e-27fc-a08f-e9daa4c14e3e
 14 adda564d-4eaa-6264-bd7d-78d7c3e68ac5
 15 14516ac7-d3a4-1034-814b-d3d81051c9dd
 16 d84534e9-58dc-4d50-b847-113f3d69f31c
 17 e4af7d34-ecdb-5e04-86a4-8e7b9e304ba1
 18 20a72ff1-b969-67bc-8359-d5fe15a757fa
 19 9cf499b5-a1d9-09ca-90f9-ac1924735519
 20 abe15d56-0b05-80bb-9a51-c0a42618c279
 21 c1d83fa7-1fb1-361f-8852-e9d40890c697
 22 e8107673-9824-4627-b408-aa857adc77ea
 23 434aca28-af39-3125-a3ba-5b3d429b54c6
 24 8c5ca346-0356-6ef9-bfd3-32adf95c909b
 25 879fe9e6-779b-0812-8c5b-f6f32dd40a31
 26 fbd3468a-e137-2f59-b35e-e61377f832bc
 27 53790b10-fa00-8fc1-8ffd-8970acc3b524
 28 cd980694-5150-1398-b2a0-344e975255a4
 29 47767b37-7315-8fb2-99f3-d634ffc264a4
 30 78d5574f-899b-1a3c-8310-4293a45cb0f4
 31 d342bc52-e568-81a8-8640-d97d0772afb0
 32 9b879a0a-5620-0a88-b28b-7d3749b50e63
 33 ea23aa28-3ad2-8543-a5ca-413daa76ee93
 34 fb667b45-0e8d-1966-a0ce-f8a7b8164cb0
 35 b53dd343-bb04-2e75-9e7a-f08aad651689
 36 0f256bf0-19b2-0aa3-a288-faed82b00b68

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 253871348665261456083436028181808120. Exactly this sequence comes out of new Random(606).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 90 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs