A858DE45F56D9BC9 archive

201303040308 19mn6b

explained decrypted filler

seed 417

Metadata

Post ID
19mn6b
Title
201303040308 → 2013-03-04 03:08 on A858's clock
Posted (UTC)
2013-03-04 08:08:51
Timezone
UTC−5 · title 03:08 against posted 08:08 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303040308) = ef969d01ff8dc3c7e5922dd1fe8b2a26 (name+title)
GUIDs
32
Filler GUID seed
new Random(417).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
164 · predicted N = 32 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303040308 (name+title). Key = MD5(password) = ef969d01ff8dc3c7e5922dd1fe8b2a26, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 919e88de-1772-52cd-b92d-6b1a1bafba6e
  2 aad08a3b-bf46-1d1f-a104-d0e8d1db1478
  3 6d9f6cab-e7b4-2f81-962f-191d724db427
  4 459ad6d8-e08d-58c9-a91d-b86a872d18d7
  5 f1063d33-028e-4846-abd4-1703f1a088a7
  6 469e9ff1-0698-8762-a6a5-1e04af794e2f
  7 927746ac-f35c-61b8-ac1e-3cee37354a70
  8 1c490046-5ef1-5655-bdf2-d57f5ec21da6
  9 ca940824-6a86-5bcc-ab7e-b1c30b958764
 10 4b9568dd-47e5-0f95-9f71-4fff9f9f2938
 11 15a1d7fe-01c4-4a04-83da-2e724a3ca189
 12 6b01024e-898c-0814-8467-050f60999fad
 13 1af98b18-fc05-2b4c-b8cb-e274be81a5c4
 14 6afc68ec-0354-32ea-898d-2d1538ac054e
 15 f1f52044-d017-7ab3-aa0b-175af0a761bf
 16 ab519fa1-f89a-4406-851f-ae619f979089
 17 e67f0324-2761-1711-9d4a-19ea419ac736
 18 cbe4777f-d157-4408-83cb-bab300927621
 19 1d0c3bf2-6fb2-86f1-ae36-faf373a8d69a
 20 d03278e5-919c-789d-865b-8fec8153e32f
 21 2229bde5-4883-2539-85a9-63efde5772e1
 22 eb110186-c539-1b41-a442-3c78272e42e5
 23 ca19bc4d-1cde-4c90-9ed1-94e727191e7e
 24 5876e81f-1541-6d28-9d25-d82d39d48b03
 25 9c054a2f-e2c4-5c2a-a35d-167bd0221fcf
 26 29efd927-aa42-66f9-a386-52c362bee372
 27 a459664d-18b0-4a58-9faf-b7ee0c9c9222
 28 7880552c-662f-0c1d-8d8b-99e6779884d2
 29 3fa881f9-ee89-6305-b6f3-6e6e41047c92
 30 37cf5d8c-6b63-87e2-a11a-d2641c33d7fb
 31 3f87142e-ddb7-1cbb-b960-871ca86eb847
 32 3bba6647-32dc-230d-9eb8-6b5b2fd0c55f

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 51254865504023741487214656406812. Exactly this sequence comes out of new Random(417).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 164 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs