A858DE45F56D9BC9 archive

201303042150 19ojyh

explained decrypted filler

seed 487

Metadata

Post ID
19ojyh
Title
201303042150 → 2013-03-04 21:50 on A858's clock
Posted (UTC)
2013-03-05 02:50:50
Timezone
UTC−5 · title 21:50 against posted 02:50 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303042150) = 961693b9fcef2accc3c7439cede143e2 (name+title)
GUIDs
36
Filler GUID seed
new Random(487).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
181 · predicted N = 36 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303042150 (name+title). Key = MD5(password) = 961693b9fcef2accc3c7439cede143e2, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 271b0c49-2c97-1e2e-94d9-56503ba1969f
  2 eaf56584-f927-6ea6-844f-66a9d3d67779
  3 fe52bdaf-86a5-1434-9087-edab9256ea39
  4 d2852100-5372-48bd-b338-40043c216ec9
  5 80acb758-be29-0cff-9849-f5a2f20061f4
  6 b94bde40-e87e-12d7-9578-53ee6257a51b
  7 ff5a9ca9-895a-0983-bbfb-a83848e7e6c7
  8 c5e80b1b-99e0-6c13-838a-816ac2ce317c
  9 7c75ed7b-704c-22cf-b814-b709101f4221
 10 c5505ccc-2156-7885-91aa-5135eadfef20
 11 a10d226d-cbcb-060d-83bc-412c69ed35c8
 12 a4a0f75b-9040-64eb-8fb2-bf1a4f01d6ff
 13 1b01fdad-14b2-349d-9c9b-67dfa27100b2
 14 0f9902a6-d8c9-71cb-a495-3ac69153ec16
 15 9b02e1d2-536f-7f09-a84c-7fb56909a4ea
 16 df5f1a1d-50ca-16bf-a60f-7d19ef35b0b4
 17 2e39338a-de91-5b2e-9fbc-257941df417a
 18 e44432be-aadc-8ca6-878d-22ea3cef925a
 19 3092257a-6d8c-712b-bf89-52178d1c117a
 20 7416d20d-6cac-796a-9004-42b55d533c8e
 21 e270d54c-0197-4f04-9f14-2a5e928d4486
 22 9edbfdfa-461c-2b74-99cc-f368b2da4ea1
 23 f9cbf961-f42a-2ae9-be83-21c5faf5329d
 24 2b8afd08-0d45-1859-b566-8e6d243cd3a3
 25 2f8d10fc-096e-3dd4-82da-32ee8ae55c79
 26 90a80c23-7e48-6838-bd3c-a1720a8f0525
 27 15d1a6e8-7ba2-5386-bf07-5bb9b4d09ad5
 28 60c75ee8-da33-3a28-ae26-afa871a02828
 29 9b84ecc5-2d79-0d16-8827-82fcb2ed05e6
 30 1301dee1-b4cc-2bea-ba6e-b3c51017fcec
 31 6bb16bce-c442-8d3f-b5b0-e931bdae12ad
 32 5b6fc3bf-8511-6605-b615-eac3e13f3693
 33 1861f1ff-3f70-1825-80a0-7075c43df0c8
 34 31d0ea89-9d94-1409-aaba-833f823d0c97
 35 a0f83be6-91d3-6f7a-8b24-106f75e8e9f1
 36 bf6791b4-a6bc-7a13-917b-f4bd3f6007d1

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 161401062706377158774221365302861167. Exactly this sequence comes out of new Random(487).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 181 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs