A858DE45F56D9BC9 archive

201303031356 19l6mj

explained decrypted filler

seed 61

Metadata

Post ID
19l6mj
Title
201303031356 → 2013-03-03 13:56 on A858's clock
Posted (UTC)
2013-03-03 18:56:52
Timezone
UTC−5 · title 13:56 against posted 18:56 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303031356) = 988d82e4f15168466febabb7ff735e93 (name+title)
GUIDs
36
Filler GUID seed
new Random(61).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
152 · predicted N = 36 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303031356 (name+title). Key = MD5(password) = 988d82e4f15168466febabb7ff735e93, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c090fcfc-89e4-52d3-a34d-eca3dfb5e366
  2 d9f32b70-5d0b-6aeb-88e1-d329c69952b7
  3 b854f6c3-54bb-3ed8-bf69-3b9a9556b4c1
  4 ca7861a0-00c4-5517-a5ff-5804e74a5619
  5 98e8435f-2971-6619-90da-24e56e27ca6e
  6 aef65c4f-8548-7987-bdd5-e28cfd0031e0
  7 3c4c0f61-a0a1-2f04-8941-31abde4b946b
  8 cdb37d28-930e-0c67-9a93-0d1a846b78fd
  9 e064fe87-8479-4889-baae-760847d11521
 10 f0ac1b7c-b257-622f-92a7-8b880c675db4
 11 2bcec11c-9ec1-2e3d-80b4-bab2a3ecfd70
 12 0b134540-a6b0-0f34-8085-38934e825d8c
 13 2c29e09d-3c24-56c8-958a-b5e60eb6cb9f
 14 082951ed-2acf-13da-9c9a-92ed4bd69258
 15 19b6dd9c-653e-6730-b6f7-9766ce6d0783
 16 e060130f-be35-186f-b198-6584af9143bd
 17 b48e4944-407f-42a7-a094-3ff4a69e85b6
 18 301f4a2c-858c-7465-9e68-a12a848442ea
 19 3690fced-eee0-2a84-9fe9-dc0c3ab25294
 20 b6a097c5-888c-8142-8bc0-0b0b45147e18
 21 ade6c94e-2971-8603-b700-f3d7f8d86371
 22 69dc65e5-99a7-7275-8233-d65ba9304b34
 23 eaa6728c-2936-2e4a-8f0c-d8c87dd47834
 24 9c617259-137d-30f7-a0d8-283228cc4bd4
 25 8083c6a3-ce39-6d52-9b9d-635021523805
 26 d8b1ae3a-d5a4-67ca-9576-d2889ceff8e7
 27 798157e7-eb80-3a1e-a712-689d10d6d795
 28 fba3dd99-c744-4354-b37d-c91a949426f3
 29 dcce39bd-4ecd-3790-94c7-f0357d2b7d5a
 30 837ebd87-d30e-1e50-8f72-951b6bbbc9a3
 31 30181900-21e7-6c14-a447-1b335f01aea2
 32 e2182a0d-2748-49b8-a68a-ef63bf709590
 33 dfa32393-8974-7f18-9676-efb8b2aca7e7
 34 2cef9b8f-42a7-4f0a-86f6-b3ee53b649b5
 35 91620b99-c483-8030-a143-ff29b8cd08e3
 36 8e2e1841-30bb-3d1a-b7de-b888dc941583

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 563567204620516147288723663431647483. Exactly this sequence comes out of new Random(61).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 152 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs