A858DE45F56D9BC9 archive

201303060438 19rnnt

explained decrypted filler

seed 943

Metadata

Post ID
19rnnt
Title
201303060438 → 2013-03-06 04:38 on A858's clock
Posted (UTC)
2013-03-06 09:38:49
Timezone
UTC−5 · title 04:38 against posted 09:38 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303060438) = 3f99585a8f67f6d8bb8fcdd3222ead43 (name+title)
GUIDs
32
Filler GUID seed
new Random(943).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
209 · predicted N = 32 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303060438 (name+title). Key = MD5(password) = 3f99585a8f67f6d8bb8fcdd3222ead43, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 39204153-40a2-358b-a06e-3a78cb34489d
  2 c793b725-f9b5-4135-ae40-c80fa62ab30c
  3 c14f9153-0665-8389-9586-c83acf441e90
  4 9382b757-a2b6-7937-8943-3b83269b084c
  5 045bd767-1144-8dc3-ad90-12c434372215
  6 529ec588-275c-58c8-8918-d13299801d5a
  7 7b59e6d4-9d54-3e88-9646-d2608816c607
  8 3bc406aa-86af-402b-afd3-7a0cf4b91e3e
  9 d5fa93b9-2672-5ea9-b591-71d2bd764be5
 10 dadb107b-4346-03a0-84b0-5473329b53d7
 11 142eb9b0-efe3-037e-ab73-0fa072b8274a
 12 a964cca4-329a-68e7-8022-5cc551b2c8de
 13 ddb2928c-ee77-8054-b199-bf48ce1fa6b2
 14 47a86ca9-0fa1-036d-9547-1144b39bad5b
 15 8fec7d97-033e-0175-84ce-6ccbe73c17df
 16 9f44e84b-878e-8d56-b1c3-84ad56b25e2e
 17 be64cb8a-336e-25a7-bbfb-f61dd58c756a
 18 67f02177-81dc-5f99-a68a-a9503e01463e
 19 2ad5dc20-8375-194a-8fdd-b1689a9626c6
 20 5ce6a2ca-2948-4ddb-8aff-72e88c53a320
 21 3f03160a-0de3-1f49-b234-f9770a6ac67c
 22 7d87fc68-7ebb-12f2-972a-71828ac6c7c7
 23 af9249a7-9b6a-3d6e-ad5b-ac9d0e3eb405
 24 5efa2f5d-b1ce-450b-986a-2caefa1744e9
 25 1b99af6f-68d6-1358-8997-fbe28c39f363
 26 55e499ce-83dd-08a6-b27f-87f3d1df097b
 27 334c7050-40d1-66b0-8a38-b6c4f685b51c
 28 14295463-6aaf-8df8-bc4c-2f422870cd3b
 29 95fe6d7e-a2aa-07b9-a2b5-62461ba20424
 30 b2521c7c-d6a3-4f01-941e-7c31dec832ef
 31 fec9ddd7-180e-244f-b1e7-db7cff63a62f
 32 c6c938bd-da56-7c91-b4ea-1d5b400deafd

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 34878534500680082514113410680427. Exactly this sequence comes out of new Random(943).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 209 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs