A858DE45F56D9BC9 archive

201303061008 19s0ca

explained decrypted filler

seed 645

Metadata

Post ID
19s0ca
Title
201303061008 → 2013-03-06 10:08 on A858's clock
Posted (UTC)
2013-03-06 15:08:49
Timezone
UTC−5 · title 10:08 against posted 15:08 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303061008) = 9651705d293445d397c81b982df3f206 (name+title)
GUIDs
40
Filler GUID seed
new Random(645).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
214 · predicted N = 40 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 16
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303061008 (name+title). Key = MD5(password) = 9651705d293445d397c81b982df3f206, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 2bf53e57-6f91-6aeb-93c1-099f979d306a
  2 1a8ec995-f429-0339-9d36-690a7f95b45d
  3 99e7df20-a754-59cf-8131-6f2a2c3b0a65
  4 8506f718-ad2c-2f6f-beee-cf3b4fe39091
  5 8e0ca527-fabc-3e50-b911-559ef0f9cec0
  6 42a0ef00-e71a-22d9-b535-3a6e4c649987
  7 e25ebbbe-7db4-8233-9346-26540f75e9e3
  8 b873a065-9fac-024e-8599-32c495c67030
  9 09e01e32-61d3-692c-9b14-ae1c042990ea
 10 d00037a4-61a1-15a7-9514-220a2fdffed0
 11 4b13260a-7ad6-4d7b-8de1-2632d359688b
 12 bf8cc1a2-3e8a-0da3-a456-61c605cac792
 13 ecfcb859-5b5c-0e0f-8065-6f0a1635096d
 14 f7fbbfc3-3458-0ae6-9a49-0d79f1ed3e93
 15 7536d64b-453e-4a46-b7e7-e7a7ce7cb997
 16 30b41ea2-aa88-7550-a10c-269da3531aef
 17 e034acd9-77b6-8654-aca7-e706b654bcd4
 18 f12416fc-0127-855c-871c-9f03d175fcbc
 19 22b1fef5-f733-12d2-8863-789233210cea
 20 914d7c89-c233-005a-b2b4-ed7d75552499
 21 3707b87b-1204-4e7a-9de4-163c8eeabf70
 22 aa5327b6-26a1-07e8-bf16-8239f0a005df
 23 c3450b7d-6607-05cd-95fe-c24ab142063c
 24 c65cc965-9e58-3f83-8c46-a545a4b62a84
 25 cb0663c7-b87e-8db2-8474-fe1f2a98ea75
 26 a42726b2-d022-352c-ad19-176c1a98155b
 27 bb153de1-1209-49aa-9752-c13fb1534a5d
 28 1ec973b3-7904-3f82-90e6-5a9d6881e903
 29 543268fe-437f-6f75-b40f-eb227962fd48
 30 d652dd38-a95c-4ff6-9daf-a0cbfedcdb38
 31 31a694a5-eca7-200d-ab3d-fbbb1b21d3f3
 32 1baeb8b4-2668-3e06-8183-8aa7408b3b76
 33 7c96e19d-42be-642b-b243-5bb8ec299654
 34 31a8a5cc-d926-1f48-ab8a-234720b27aef
 35 177ceec1-b573-7acd-8842-7c1ef32ea504
 36 eeb070b3-18d3-6ad6-8dd6-36e750645e54
 37 e3e32df4-545b-2558-9955-b917e5eec500
 38 bb5780e9-e0d8-85a3-b167-e8a23c8612f2
 39 7fc41870-52c6-75a6-934b-3aaf28ad23d2
 40 60f34fed-b569-1f48-82ef-7e98382cac8d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6052328061400047881040038343642361762871. Exactly this sequence comes out of new Random(645).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 214 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs