A858DE45F56D9BC9 archive

201303051526 19q73w

explained decrypted filler

seed 600

Metadata

Post ID
19q73w
Title
201303051526 → 2013-03-05 15:26 on A858's clock
Posted (UTC)
2013-03-05 20:26:50
Timezone
UTC−5 · title 15:26 against posted 20:26 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303051526) = 95b03f35d305e81b11009d6492c38f69 (name+title)
GUIDs
36
Filler GUID seed
new Random(600).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
197 · predicted N = 36 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303051526 (name+title). Key = MD5(password) = 95b03f35d305e81b11009d6492c38f69, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d2198b12-ce90-19bd-be0c-2fc3d638456e
  2 cf833da5-d5bd-7086-8a57-54c31c0986de
  3 b09317f4-1312-1203-bc89-371626f11c3d
  4 27e16a69-6651-524e-8545-f5fb0e2bb203
  5 e2a0067a-0fef-0983-9733-d71fdd440d8b
  6 4714892b-0971-8b1c-87da-d36908e23422
  7 9032b3cc-a1b6-636e-9c3f-b545587af003
  8 4afc286e-a50f-4914-816e-650efb518062
  9 144f5107-890b-1a5b-8003-5fe280c4afb3
 10 96c1fd22-a7f0-4926-bfe4-ddcb754f4d88
 11 2358fb69-d56f-2a64-9ceb-bb4194f0a365
 12 53ae32aa-fe4b-8ea0-9c45-ab277c3a20c4
 13 263ceb4e-0e90-0b9c-91c7-fc42215fd123
 14 5335aec0-2f72-56a6-9d83-d5de43d3ce23
 15 4b7c2043-4f68-8e94-af08-583ddf65b619
 16 15d3e9d8-0f7f-6cd4-be4c-c2c9fe7c9360
 17 73bf84b8-e35b-0663-be10-11d71c567088
 18 372e4fa6-95b1-8e01-a669-806d0e7f16cf
 19 454b00c4-e751-85b2-8b55-02c1ccd9cacc
 20 9a903718-34a0-5014-8630-17b9dd3c4097
 21 a8e67798-9e2e-42d7-aa24-153d0202efde
 22 5629b154-a274-073b-be4c-7bfda1bc450a
 23 cf0a2814-5a2a-3587-8177-23a4f5e81d70
 24 ef15397c-d140-5d8e-8ae7-7f9128ce09b4
 25 bb077d91-dfdc-480d-97db-968d9e4cad81
 26 b9f5bfc2-e28a-357e-9b78-49839d03171b
 27 836d0b7b-e801-750a-be54-c661818016bd
 28 31bbcfa4-32a1-459b-b40d-e94725f54c66
 29 de487dbe-b10c-2eb4-8852-201740e1151b
 30 47265431-f5dc-270d-85a9-169c5787dd62
 31 6fa24d03-5117-6609-bf05-ad4909f2113e
 32 1a3bd088-a225-4787-914f-b66c1371fb23
 33 865f8ee5-7c79-5432-8757-6e9e2a1469ed
 34 2d609b16-bf29-0bae-9299-7e529466ef1e
 35 9923ed06-cc3f-17b1-963d-2d72c936ff7b
 36 7894ed4f-21fa-6a5f-b428-44bc35d37d35

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 171508641428058608854035437422645016. Exactly this sequence comes out of new Random(600).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 197 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs