A858DE45F56D9BC9 archive

201303061644 19suqr

explained decrypted filler

seed 322

Metadata

Post ID
19suqr
Title
201303061644 → 2013-03-06 16:44 on A858's clock
Posted (UTC)
2013-03-06 21:44:48
Timezone
UTC−5 · title 16:44 against posted 21:44 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303061644) = d448c861efc59927e143462f42494545 (name+title)
GUIDs
32
Filler GUID seed
new Random(322).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
220 · predicted N = 32 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
8 · 21
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303061644 (name+title). Key = MD5(password) = d448c861efc59927e143462f42494545, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 12616621-18a5-8793-b5d2-ebb294c14c5e
  2 2149cc5c-de2b-21e9-83e0-93bdd6cdfd27
  3 cf0d0b26-f56a-7c1b-9825-461f450c7ed1
  4 d2d11ef8-ef82-2bea-aa36-59d4420fa034
  5 52b6afd7-1926-50ec-acbc-abca01045203
  6 79a13e62-3284-831b-a4db-d3400cb796f5
  7 8ef954f3-213c-17b6-aa80-fd9eefcdfd13
  8 4487d00b-0544-8681-a8e9-e2559c656ec1
  9 1b78493b-0611-7cd1-a78d-7d191c363909
 10 d7a48188-09de-09ab-ad36-f4aed4eae362
 11 7ae5fb39-bbb1-45a4-b496-b96bfcce57da
 12 2e15ec02-7ec4-7e47-8a9f-bf7c9f56ddd7
 13 4e98b099-ccc2-8a4d-80be-2c90e5736aa7
 14 a5c0acc8-5433-8004-940f-5391a30dcb04
 15 3c02303c-1143-3eef-9611-8c8f789cd444
 16 b73aabcc-1e37-1400-b1a0-fe93c473f50a
 17 9faebc4c-9c6d-1685-b167-1c00c9893b72
 18 476d7e77-494d-5df6-822c-458119c90b47
 19 f4548710-d87b-35d5-bfbb-2c8f2c6c2c30
 20 9b1e06a8-0dba-8dd1-a5f5-baeed8800f2a
 21 39ccf761-aca5-58ef-be1c-9266d38540cf
 22 cbaa87e2-0c78-7ef5-9c3f-0609bd89127f
 23 d1714cbd-79fa-3901-bb0b-8c64b4bbc3b0
 24 c5679d24-cda1-40cb-8c8a-02370dcf5968
 25 2cc9bed3-8182-2123-a36c-29c76b5eff2a
 26 a2f9bc0d-a949-5afa-8f65-c5ea303d6b24
 27 cc202f58-ad3e-79ed-8045-5553042c3ec6
 28 8c937f67-e66a-10d3-b788-4439a613c57c
 29 9d863d05-dfa6-4b98-9df5-99dbdf13ad94
 30 629e607e-8ca4-3da9-b407-b812288caee3
 31 5fa3599d-c1ee-0392-b727-5ea8fdb43c9f
 32 9b8b9288-48ef-2451-81dd-35e81dc6d821

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 82725818704788311538573425714302. Exactly this sequence comes out of new Random(322).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 220 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs