A858DE45F56D9BC9 archive

201303020138 19ig75

explained decrypted filler

seed 982

Metadata

Post ID
19ig75
Title
201303020138 → 2013-03-02 01:38 on A858's clock
Posted (UTC)
2013-03-02 06:38:54
Timezone
UTC−5 · title 01:38 against posted 06:38 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303020138) = 7cea67a17550ff2c16fa967fa7165d69 (name+title)
GUIDs
40
Filler GUID seed
new Random(982).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
119 · predicted N = 40 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303020138 (name+title). Key = MD5(password) = 7cea67a17550ff2c16fa967fa7165d69, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 2a5d8453-a904-66db-8700-8eddad8b7125
  2 31f123f0-7239-86af-92b1-1ac3a67a1d18
  3 2fc27ec3-618b-1fd5-9162-dbc980950cc8
  4 3300787d-b189-14c6-bd26-122ab9bffb65
  5 8d395cff-70cd-581a-ab46-a81ed84f57f0
  6 ce8415a7-e165-62d3-9c64-23db926dea58
  7 bbcfffd3-36c3-8257-bc91-7c58b6037159
  8 f7a268a1-5ec7-02ad-a562-fc32430620fc
  9 200f5fe1-7f1f-4131-9655-2c9e6d1f69d8
 10 10a4dd07-ec06-3fcc-ab47-2a3654853c50
 11 280eb9d6-01dc-65f0-b8fe-c9546ab56aae
 12 7b22e1c8-ae1f-1f07-bca8-dd42436ccde0
 13 dae7ab0a-6746-66ab-8acb-7abc8c3cc6fa
 14 c88f7396-b59d-3187-a24a-cf602a792465
 15 955022e8-8e8d-3897-8fcd-306ba1793b68
 16 18a419e4-b1d2-2f30-b3a9-8f4871519e06
 17 ba479f5f-7fe9-568a-a049-f061cffe9813
 18 9259145a-eaef-71f0-9362-602e6e818b12
 19 02ed4fb2-f1e9-2f37-9ca2-4a3b2d6323c0
 20 17dadf13-eec6-4355-b65a-e842ddd35a77
 21 bccf5aa1-83a5-2333-a7f0-f34901035190
 22 3f6b25ac-06f8-612d-a907-8c2771b761fa
 23 25a34a4e-4726-8554-b887-f67357e07f7b
 24 7aa7a873-d010-0d3b-919e-21069e5e5f77
 25 feb664c2-9c98-8d37-8d6d-5805d0370c39
 26 ea160178-6082-1229-b519-953d1253ce86
 27 294f598d-d0ed-24c4-9b74-916040c24009
 28 4c57f6dc-6c49-11fc-adca-8639f7d8728c
 29 9d52c204-6cd7-76f6-8b5c-b3f9c66f5fa6
 30 b64a931d-b4a0-8906-9868-47c723a5fd65
 31 34b8e290-478c-67f3-bbf5-9124c78d2040
 32 457cf376-15ff-1335-aa11-75c22cce9937
 33 6d50389d-7135-135b-8665-f86099e527fc
 34 ff18d772-82b7-5ee2-a1ad-155d3ce40911
 35 c85c8df8-6121-446f-a6f8-2f6aa744be7d
 36 127c998e-57ae-2b78-b843-fcf7b9ce161d
 37 fe24c475-d4b7-43f7-ac3e-f94ee766bef5
 38 74466417-7a04-59c7-aa54-3ab6a8a5e9d9
 39 fe86e25b-40e8-47d7-a945-8097f86619fa
 40 27075add-e76a-4416-8705-781489f80425

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6811568043616332572426808121786115424544. Exactly this sequence comes out of new Random(982).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 119 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs