A858DE45F56D9BC9 archive

201303050956 19pikg

explained decrypted filler

seed 857

Metadata

Post ID
19pikg
Title
201303050956 → 2013-03-05 09:56 on A858's clock
Posted (UTC)
2013-03-05 14:56:50
Timezone
UTC−5 · title 09:56 against posted 14:56 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303050956) = 237812dcb97e0b206d410bb2f934e948 (name+title)
GUIDs
40
Filler GUID seed
new Random(857).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
192 · predicted N = 40 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303050956 (name+title). Key = MD5(password) = 237812dcb97e0b206d410bb2f934e948, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 2d8bc09f-338b-4932-8196-48aa9ea77e0e
  2 b0c3f147-93f4-2ef0-b1a1-bcf753d15586
  3 e0cea46b-f013-76e1-8be7-86cdc7a19531
  4 614fa065-c5b4-495d-9a58-dc0254568112
  5 2bc0bcfd-3736-18cf-9ccb-fdc1ac4b0e62
  6 f6c69155-0f89-4fc6-9502-f87c17550c8f
  7 d666e0df-42bf-8fd1-a980-f73d8d18e849
  8 a37b913e-d9dd-31e1-b638-fd462f37d2a8
  9 8c4d3502-f478-0908-a415-f7e1afc5e93b
 10 1dccb105-9ab2-2b5b-97b3-0c6d310f8d70
 11 9397dc7c-83c7-6223-975c-70b9ba588945
 12 1fbf5c06-06b2-4979-85c6-77b6652b86c4
 13 6582080f-2133-7bfd-a578-9be3d247bb5d
 14 c7b6e48a-eb39-2db3-9119-beeec60e6da3
 15 10f76aed-3fa8-7131-81a7-9f7c3375162a
 16 03b15508-326a-263f-9424-be64836aa51a
 17 be93d571-6558-0a56-be9b-a21db6ca17b6
 18 bcb428f9-57ba-3ffe-91b4-5c47ef7b65b1
 19 3afbceb8-695a-76ba-a87e-f18aaff09133
 20 e89f5fbc-0646-1c9e-a29c-2ee540a5b58d
 21 d1d5b3b8-a976-6a58-9fbb-6b67448a4aca
 22 d458dfd3-cf24-0c68-a33b-32cbbdd1af8b
 23 5366c1f6-76e6-717d-a2b2-5b43526e0fb6
 24 c7af29fa-6fd6-3f8c-91ad-43fb154ff271
 25 ffd09b0d-33ab-6336-8a30-f09a2fdd02c7
 26 1c766994-a6a9-6e04-a300-397043387f6c
 27 7ac62b2c-8360-6db0-b0b0-2ab9d9877eea
 28 9620723a-cb6a-6fab-ba44-e3481957b86b
 29 ea455b65-2767-27c3-a8a7-c3eb4d63a2c4
 30 9e3852d5-12c7-23b8-a21a-82946d69320f
 31 6afebfba-b438-5feb-b6c0-5e8a09ff5c21
 32 c0541bab-7afd-169e-9c82-df9f3d162711
 33 9f782958-0bce-8cd8-a618-a84cafe790d5
 34 d03a2bdd-aa5e-4781-b8a1-6c0f27cb8a3f
 35 302e2ab7-caeb-7f8d-8f02-b9409e6626dd
 36 522cde07-ed05-8a6c-ba24-75e516e48231
 37 de871ec1-258d-86cc-b21f-1e6ebf6fe8dd
 38 522cb2bf-eece-30c3-b6bf-a968f5ab1b7b
 39 23f5271c-1d01-090e-8e9b-79c80d05d1e1
 40 4a65db51-8ccd-5e91-b9cc-4bb646c7536f

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4274148302647272037160736666225184788305. Exactly this sequence comes out of new Random(857).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 192 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs