A858DE45F56D9BC9 archive

201303032244 19m8fs

explained decrypted filler

seed 658

Metadata

Post ID
19m8fs
Title
201303032244 → 2013-03-03 22:44 on A858's clock
Posted (UTC)
2013-03-04 03:44:52
Timezone
UTC−5 · title 22:44 against posted 03:44 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303032244) = 7a12c42a14643b659700ba740e8203a8 (name+title)
GUIDs
32
Filler GUID seed
new Random(658).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
160 · predicted N = 32 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303032244 (name+title). Key = MD5(password) = 7a12c42a14643b659700ba740e8203a8, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0883a017-faf1-4b6e-a50e-e64e260856d5
  2 99c6e0db-1fd4-7594-82b6-456d203f0c07
  3 a8562203-3f49-6076-9640-9ba59f77bd50
  4 18fa1012-4507-0518-b40b-772448ee9350
  5 0c06449f-65d2-2d27-b3cf-edc9c140a477
  6 d2189a91-6794-50e6-a692-a8b2747baec4
  7 e2b71c09-0a86-6f6f-b2a2-aab35437368f
  8 4b9f5948-cdaa-4a11-af26-da3b0994613e
  9 704902d9-3698-3e7f-8b28-660b1364de89
 10 310f0dbb-d103-88e3-8ffd-7c49b1a946db
 11 fdbdd801-427e-0016-9dac-bbb5f792dc0b
 12 7ba6ec15-4ef4-1b66-a675-410992745521
 13 0411e8f0-44a4-88aa-92ce-27818a908d82
 14 cef39944-5e91-71cb-aacd-46ab0189c664
 15 94190538-5a4f-581a-b6a4-cf9776d6719f
 16 c6107ef6-c326-892e-b1ac-21eeeace2e50
 17 2f078925-4a42-4e75-9bf0-5871c5f01f7a
 18 89946b55-e902-86e6-afe4-e4e6201daef6
 19 d15dd335-a156-44a3-9669-f4a894dca7aa
 20 75c1696d-6244-02a7-ad18-efea8f0a5e57
 21 0fb6ad6e-d8f4-252e-a641-9e7cb620d428
 22 5847fb7e-8ee0-28fc-b946-c2609d506ab5
 23 7dc2becf-09b7-1e4c-88f3-b7c9d6ed3bb8
 24 cea4a4a2-b874-8a00-940c-01c32b7cc468
 25 2b912844-9bca-1588-8711-816d3e8e9490
 26 d8751b70-642d-6cc7-a653-c6a7efdc68ce
 27 2c50222f-10bd-56c4-b29d-57362543fb4e
 28 e94e5173-1633-3338-8c95-89488eeac8b2
 29 378ac158-5ecb-2829-8e2d-f209f2b81823
 30 3ab36fcf-bab8-0033-943d-9ea86ce5e3b9
 31 9a30e33c-87f5-0489-a95f-95dd9ce714eb
 32 11545b35-71c3-67f0-9cd8-d07e2b754500

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 47602564380187584840221816532006. Exactly this sequence comes out of new Random(658).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 160 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs