A858DE45F56D9BC9 archive

201303061326 19seom

explained decrypted filler

seed 480

Metadata

Post ID
19seom
Title
201303061326 → 2013-03-06 13:26 on A858's clock
Posted (UTC)
2013-03-06 18:26:48
Timezone
UTC−5 · title 13:26 against posted 18:26 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303061326) = 3f4bee617183197bf96ef133817b2f37 (name+title)
GUIDs
36
Filler GUID seed
new Random(480).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
217 · predicted N = 36 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303061326 (name+title). Key = MD5(password) = 3f4bee617183197bf96ef133817b2f37, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 fdb3ed56-0df5-477f-a373-b457f0425bb0
  2 06a22db6-c42e-561b-9bc4-98db4699d12d
  3 9be22394-2abe-2d7a-8d7c-7b4bb4f1c6f8
  4 f2abf223-0f59-0d7c-ac70-2780a71c4f88
  5 4c6b12af-2444-8917-8c6a-ed721591aa1c
  6 b67330b5-6585-030b-ad93-060ea49aa2ac
  7 d22a1de8-ddce-88a8-9a53-b20591daa0ca
  8 04e30ed3-01c6-2dd2-bbce-eed5addb17ff
  9 38aac31b-0a79-32ef-beed-87740e04b1ba
 10 50d3af5a-c7ab-2571-929e-d578bddd7858
 11 9b5a311d-8e7b-8b42-873d-23ad0f5771a5
 12 93d6ae85-3981-1a82-a123-eda0aa75af95
 13 b26c0512-9910-5d1e-ad6a-471ee1f5e462
 14 a89b3335-13da-1b27-aa61-f352965e870f
 15 0191dd47-4c65-84fe-801b-294b957ad78d
 16 2c11cad2-7008-72a1-9520-ab8c45f22f2b
 17 466f64a2-00f2-5f91-b4b8-f6002506b400
 18 e76217b6-5954-5907-911b-f2f9d18fb806
 19 0acce01f-eb21-66c7-88a8-0d41e51ef1ea
 20 ec19a98d-729c-150c-a31a-4c328b2c8d71
 21 1acdc363-c165-5419-b4f6-d9d81ec3bc2e
 22 e9a8e8dd-1fd6-53ae-8a33-7400f39c04d7
 23 a5d60faa-4b87-142f-beed-5db357f24307
 24 9eb11041-7422-672a-9600-3512fd2a6413
 25 74b9e5d0-7d04-60c1-83f3-fc8a4da26fac
 26 3e5b6c12-f3a0-2f1b-a88d-8464c99157e6
 27 76d8ffba-3236-5057-8afa-6c632dfe2f6f
 28 6f1a9fb5-7ff0-0789-bf52-ec00771a6f74
 29 459a796f-ae23-19bc-96eb-6980ba4da40b
 30 c8778d23-559c-5438-ac1e-b71d7d4e6c10
 31 7e8bc296-92bb-3da5-a3e6-2aa39cddfb6f
 32 4a39ec16-cfb5-725a-9ca2-021d763313fa
 33 88c9a9c3-0180-2e7c-812e-b5d9cda756ca
 34 d4f5ed92-adbe-0d98-8292-5553e94fc70d
 35 ed76efe8-9237-2e59-afe3-dd4716c7f995
 36 e799dbcf-7c8d-5de1-b488-88412b6c2c62

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 452080823281518755615516625015372025. Exactly this sequence comes out of new Random(480).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 217 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs