A858DE45F56D9BC9 archive

201303052056 19qxbx

explained decrypted filler

seed 341

Metadata

Post ID
19qxbx
Title
201303052056 → 2013-03-05 20:56 on A858's clock
Posted (UTC)
2013-03-06 01:56:49
Timezone
UTC−5 · title 20:56 against posted 01:56 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303052056) = 08d86eb5dfa4c3adc0984cafc5ce910f (name+title)
GUIDs
40
Filler GUID seed
new Random(341).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
202 · predicted N = 40 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303052056 (name+title). Key = MD5(password) = 08d86eb5dfa4c3adc0984cafc5ce910f, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 154c8174-98c3-76f5-83a7-c72cf88ff951
  2 b6e60e4e-f6bb-79a2-a032-1803f4d06b13
  3 b6952743-1f98-1672-819d-436aaa022372
  4 201794c3-41b2-3d0a-b543-230dbc26918f
  5 4b1f8a97-d209-17b7-82aa-a4499be99d9a
  6 c232f83f-0b57-5d1e-ada0-3eb830a32b09
  7 c965f026-c540-6b33-8307-2908f81cf0b8
  8 6ccd6562-ffce-463c-b36f-de6b4dcb8443
  9 361d1958-9144-1d2a-aa77-54038488e902
 10 71dabb7d-c720-0d6e-8a7d-3fa96d3f23e0
 11 6558c4ef-f464-473c-9fea-93c9ef170c1f
 12 da0c1725-b1ed-686c-8dea-4cf3654ac1c1
 13 3c10eb93-695c-01d7-b83c-2f2db144da03
 14 7e061c09-1d46-7dbe-bb82-9bf84c5e21fa
 15 0fcc6cba-d3e2-6806-b92c-bf4466a94e4e
 16 3474e800-3ab8-8a06-8e7b-064a63075876
 17 c80d228e-897d-1455-b34e-231f67087976
 18 c9209350-f4ab-32cd-8813-2ec50683417c
 19 df695fb1-845a-8934-84a7-052b697f216d
 20 67614938-3c9d-3fdb-87ac-b56df2baf00d
 21 bee298ce-6c80-1ba7-b7e6-8033ff161d6d
 22 13f28c49-8fe8-418a-9f7c-dfb1f08da13c
 23 02eb5c49-ace8-5f23-b4f0-6ea9595d8181
 24 5b2ac223-f4f4-154f-a10b-0b1fa746b0bd
 25 e91f274a-4987-1072-a011-9966e60fbb3a
 26 55d218e3-c4cd-7519-b189-affcea1bae1c
 27 97785602-ff0e-1f70-8be5-a11f8cefdaa2
 28 cf943024-66cc-8cc8-8609-e991b9e8152b
 29 801e2625-6b86-6742-9cc6-5adc2c0d619a
 30 bd834f07-037f-6065-83d2-87e0f605c166
 31 567dfcc4-b857-02bf-81aa-7c90688b085e
 32 dfec9a96-cf26-2854-bfc5-0c521181473b
 33 876cc998-a8e6-3aac-9a21-0f2649368fbe
 34 356974c4-fe5c-48bf-bad1-4fdf088afaab
 35 9dd20ae1-f397-6fa6-a71a-98629ea18634
 36 d1d553a9-202c-49a3-908f-e1a2d6f8a9b1
 37 dec85474-9eba-465a-9f3b-3d57770a2abf
 38 8d8b528a-1f88-6166-9bbd-daf502363627
 39 83c9ca96-a7d4-6e3b-a008-cee55c727858
 40 c6e4acdd-fc3f-5855-ace8-707275b210af

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7713156410460768138314511718660234644665. Exactly this sequence comes out of new Random(341).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 202 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs