A858DE45F56D9BC9 archive

201303051420 19q20g

explained decrypted filler

seed 648

Metadata

Post ID
19q20g
Title
201303051420 → 2013-03-05 14:20 on A858's clock
Posted (UTC)
2013-03-05 19:20:50
Timezone
UTC−5 · title 14:20 against posted 19:20 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303051420) = 0ace3337bd6c432bac5e4fd94cde0207 (name+title)
GUIDs
40
Filler GUID seed
new Random(648).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
196 · predicted N = 40 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303051420 (name+title). Key = MD5(password) = 0ace3337bd6c432bac5e4fd94cde0207, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 75375c70-4959-2495-bdff-4fd460c1257a
  2 33296fba-5468-8bf5-927c-a8362950a2ad
  3 584488c6-cc01-69ad-b162-c6ebb0ac5ffb
  4 24a1b550-c52a-7598-a701-7f56a85ef396
  5 10296c4e-3d5d-6ba8-b57e-c739dde30511
  6 0fa9a64f-0217-7e18-8006-dd7715635b19
  7 02cbd84f-dc90-2a22-9d6f-7b39cc7276cc
  8 3b985175-972b-4a62-9528-c58c41e5befb
  9 b81c2fd1-3dc9-16b1-b000-8a54bda17860
 10 2181795b-803b-246d-b2a6-fd0a612cf221
 11 2e752e1b-a5d9-6e6c-bf50-bd181ce08ced
 12 6de01d1f-188f-3055-8ca8-c6129bdd0140
 13 2d23a6e4-58cc-080d-abdd-4af8c67c3c34
 14 e9256632-fd7d-511f-9cf9-d561651e1165
 15 9cf37580-aeb8-5188-aceb-b165cb26b22f
 16 aaf88298-09ac-6f0a-b7f1-b54cdfc9b30f
 17 2c008c85-939f-2aff-bd29-6443a2e0d9c2
 18 d86f5936-7768-68e7-8719-43334b5b86b4
 19 bfe3e333-61d6-1ad3-89af-b17232117207
 20 a7d70695-0e1d-2c29-af8d-27d1b08e3675
 21 90076b19-133a-84cf-bba8-24b6a3040f25
 22 2ae2ef92-1cbf-77ff-b498-e4f1424e0146
 23 7c9c8d92-1df8-4e7e-a47d-42459baef704
 24 3a2e21a7-7aa3-3b9e-a76d-0e5046adce61
 25 1decd480-a0a8-10c0-941f-754ed4962db0
 26 01ef9261-59c1-2532-8be6-0f59bb4c74a8
 27 f5d6a13b-dec2-0e96-a45c-0f9c3a8db516
 28 b2fe342a-4d07-1ed1-b64d-3ba9bc016d30
 29 2e7f5833-e9b0-44f1-a977-f86b9624fe9f
 30 e8c7a6e8-b573-873c-8fc3-a39552c87703
 31 9db9385f-4ca0-38c6-a6d9-3c98cb485772
 32 16abd389-3a5f-189a-9c85-d7e32941c5af
 33 178bee0b-9815-7dbc-99db-6728e3fe7127
 34 c156e6ca-ca79-2ac3-9ac0-b7868801e048
 35 9c29c5ef-15ed-8db6-b5a1-a1a4f59c2db2
 36 985264a0-228e-736c-b1d0-c3c6c19c2d7c
 37 3ddf5af5-4663-71ed-8f34-702ee02b43db
 38 32ae284e-3fc0-8a17-ac5e-9e20473cd731
 39 1cede641-53b4-2c8d-80c9-b2cec0783b2f
 40 06478c66-d6f3-89e1-868e-a8fe4df66881

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2867672412630556261287431201483172877828. Exactly this sequence comes out of new Random(648).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 196 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs