A858DE45F56D9BC9 archive

201303060014 19rbx3

explained decrypted filler

seed 169

Metadata

Post ID
19rbx3
Title
201303060014 → 2013-03-06 00:14 on A858's clock
Posted (UTC)
2013-03-06 05:14:49
Timezone
UTC−5 · title 00:14 against posted 05:14 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303060014) = d94726cb9761f2b3ba691d387a4e5a7f (name+title)
GUIDs
36
Filler GUID seed
new Random(169).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
205 · predicted N = 36 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303060014 (name+title). Key = MD5(password) = d94726cb9761f2b3ba691d387a4e5a7f, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 50dd3567-a7fd-03a5-b868-840775a9f1c8
  2 654b665e-d806-36e7-a24e-f22accea03a5
  3 3cabf213-532e-8bba-b918-fda569f76e7c
  4 e332822a-c9ef-5243-a2ca-fb31c842fb33
  5 8f9a7f1b-1c8b-4a16-a958-805c663c9278
  6 e97ccd06-f859-2492-b292-62c2da16a72d
  7 58203bd0-3af4-5138-89e8-a531d656c7e8
  8 0bef469e-aad5-2aa5-aa35-c26df221383b
  9 21a0ac10-a528-7a07-b35d-fed360619727
 10 c8cad577-2037-52cb-8331-0afb352038a5
 11 d8d6ed57-7adc-7c35-a286-e5fbbdcbdfb6
 12 5abc2a50-92ec-3243-8168-4e90694fbb40
 13 e3b542a5-be24-7464-acf0-ebeb03f36df0
 14 82b033d7-6eac-3a2b-a159-c939306dc8c7
 15 68a5aa7b-b126-2a73-a2c6-387f0ebaf63f
 16 9a5419f7-7cbc-52ed-bef3-46d152ebf691
 17 f7e235d7-939c-8293-b0c2-586bb5f6c5a6
 18 ea7b5654-ee57-62fd-a4cd-0382cd4d62ad
 19 671ea7e3-4851-2d44-9304-a3161b746b73
 20 c33b5e5b-50b5-6839-8dc8-566034a7906b
 21 c3b3cac5-c9ca-27f6-b654-3c494561b062
 22 bc1d8def-b1e8-22b8-8930-0cbe519f203c
 23 d30e17cf-8aed-4a83-890d-479d9e92f4e0
 24 395d719b-c349-0f33-905a-ae9223bffcac
 25 02a38108-0ab0-245c-891e-13555490485b
 26 d13c8ec1-6604-25a1-b954-4353c9a12bce
 27 ae171042-6d63-2d26-babb-1c8900162ce2
 28 d09c3867-22f6-3337-bc2a-504d790ec170
 29 11a61f01-cba6-2f50-85cd-e40b09504aae
 30 ea180aaf-f227-1775-a962-539c3be6c1b8
 31 2dfeb67e-aed4-5bc7-9eb5-73d57601658c
 32 3ac80869-4401-8f15-a76e-95e1abe35bbf
 33 abe3fb74-8f30-2c0b-89a6-d905414f5fed
 34 1aa10d00-566f-2328-adc3-707bc881d664
 35 6ed0efea-7368-57f8-a51a-c176942356c5
 36 6d80d38d-78d3-0923-9b07-3d3c1ed470f3

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 038542527573732586262240222321582250. Exactly this sequence comes out of new Random(169).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 205 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs