A858DE45F56D9BC9 archive

201303051844 19qni4

explained decrypted filler

seed 444

Metadata

Post ID
19qni4
Title
201303051844 → 2013-03-05 18:44 on A858's clock
Posted (UTC)
2013-03-05 23:44:49
Timezone
UTC−5 · title 18:44 against posted 23:44 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303051844) = 1606da31c1466895643409fc019d5c84 (name+title)
GUIDs
32
Filler GUID seed
new Random(444).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
200 · predicted N = 32 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303051844 (name+title). Key = MD5(password) = 1606da31c1466895643409fc019d5c84, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d6457103-fc0c-637e-b870-8bdbc633aa08
  2 1df8f909-15c2-091d-8adc-bb3117452ce4
  3 bf77f0a5-738b-133f-927f-5a4e8d529403
  4 585891af-22c8-2a5c-9087-5a4dc4985516
  5 c18dd756-a89b-5c8e-bac5-3b4565f6ee4e
  6 fd1d5473-a7cf-5adc-a6e9-6f32f88826d0
  7 0d86fb53-9d00-7254-af99-017abc1a2574
  8 9ba56506-4469-1b15-a120-93bb678623e3
  9 5e891254-850a-8b0a-9e8a-1f0ee89843af
 10 8f865ae7-0e48-8c5f-bbef-3c581257b116
 11 a8ef2959-c40b-334c-918e-e8f7da6a645d
 12 b421d263-6894-0902-b007-6b58de97658c
 13 d0511a12-1724-7c17-a6ba-d14fe06b1a69
 14 97fe65db-eb30-471b-b90c-f16940d9b113
 15 4527aed7-66fe-6ae6-9ffd-eccb3af5f30b
 16 49e72595-67b5-2516-a7e1-55d0a04e7581
 17 848cfd5e-1ace-4568-b931-57d4f7bff1f3
 18 e0659122-ccfc-2cb9-944f-568f459a88ce
 19 852d8a27-7298-6e9f-86ad-3ff9dd014fda
 20 f525d1b6-77ed-2578-9583-86f7b2b34d59
 21 60a2fc26-ae8f-716c-9944-14f9736738db
 22 c7bf121f-064a-6c5b-978a-a3ff90c9f8d0
 23 d9c63e13-6b2a-0b98-9805-b5556b2b5523
 24 57410b15-85d0-1f3d-9e09-2957b0ac5563
 25 ac374d84-6a8a-1b0c-99e6-f17f4ea6e4fe
 26 4dcac574-c33c-0a5b-9323-f5735fc544a6
 27 9887b4aa-0290-6dd4-81d0-44e53673b14c
 28 4f79ec97-9842-7323-9fa5-126e7f083f8a
 29 fadd7547-cca4-158f-bf86-f8e30c47bae3
 30 eccc8053-c366-5038-a662-6fb2b0d95f66
 31 67179fef-ae42-0fd4-8d2b-d0749a191276
 32 e5e76f13-0caa-3e1a-b10d-ca5982fb72e7

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 60125571883074624262760110671503. Exactly this sequence comes out of new Random(444).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 200 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs