A858DE45F56D9BC9 archive

201302282314 19fzbq

explained decrypted filler

seed 330

Metadata

Post ID
19fzbq
Title
201302282314 → 2013-02-28 23:14 on A858's clock
Posted (UTC)
2013-03-01 04:14:55
Timezone
UTC−5 · title 23:14 against posted 04:14 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302282314) = 10b625c94864565e19c216c2c2c3c435 (name+title)
GUIDs
36
Filler GUID seed
new Random(330).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
95 · predicted N = 36 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302282314 (name+title). Key = MD5(password) = 10b625c94864565e19c216c2c2c3c435, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 64ee303d-5ee6-1784-8ebe-a23a3c1d76ca
  2 ae878a30-5de3-58bb-b8ce-8183d497ee87
  3 4af6ce03-649b-3203-a6a2-15d074fca68d
  4 f4709577-78ff-8840-ae31-7338fa8787d7
  5 6c98fbc1-4bdf-1dcb-ae0b-e2777e18d4eb
  6 4edda766-24d3-886c-98fb-6768c9bf4aae
  7 2c0b68e4-0760-6859-a3b5-41e8930e56ef
  8 d8649864-feb3-84b0-82f2-abec468f1074
  9 4a12234e-ffe0-78b9-8405-1eb987c2145b
 10 fc9ac8ab-e332-81f7-8469-480969b877ec
 11 63624fd8-d989-3de7-a995-d9076842cdec
 12 1673717b-4a3a-089c-8922-90b2d091710c
 13 f0cc2e66-53af-449b-8770-6af34a49787e
 14 7e495caf-4f1e-109f-8015-c4e9582072a9
 15 ee525119-c8d2-8221-a590-e01aff1585e0
 16 b3b7a538-a8a5-14f5-8112-486f420c9d31
 17 f8ad87c9-83f8-5356-9c73-116657d7ad56
 18 db857ffd-0773-5c2d-a951-4b125750add3
 19 d4d66bba-b033-52cc-82ee-1518795cbc44
 20 075ae359-504a-0fb9-b417-4398a3179a17
 21 2105c37c-d5d0-5a90-bf4e-2bd2cc5ad4d6
 22 7dfc4619-2761-7eff-a159-5c173c26ef40
 23 4abec2ea-c967-67ed-84d4-47edc2b3f4cc
 24 331fe042-af90-2b45-a76b-2cc3bc20035b
 25 1d41d308-f1d1-0c06-8171-6c50030e2311
 26 86a87874-23e5-64b9-9bc7-8e1d73d7ade0
 27 3dde7966-9f47-52a6-87af-22a25eadb3bc
 28 d08cde47-2b88-12c6-a62c-072df5b1b6e9
 29 71bf215c-d394-6184-b7f1-1bf7bc8c470b
 30 0635a147-1fc9-7a4a-9c5b-1a15f22c19fb
 31 ba86f753-6326-030c-ab76-85ade93b41eb
 32 eb374b92-a0d8-37be-a1dd-1c6f7166eace
 33 64f4c354-aa7b-8031-a63f-ab9838cbda85
 34 d9f5296e-ea3b-25c0-87fe-39b0caf184c3
 35 3baf9480-9c20-75cc-bc2a-1012232afe8f
 36 90742f95-4ba6-0037-9649-c58383981387

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 153818687830418155505762065167038270. Exactly this sequence comes out of new Random(330).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 95 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs