A858DE45F56D9BC9 archive

201303061750 19t06j

explained decrypted filler

seed 276

Metadata

Post ID
19t06j
Title
201303061750 → 2013-03-06 17:50 on A858's clock
Posted (UTC)
2013-03-06 22:50:48
Timezone
UTC−5 · title 17:50 against posted 22:50 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303061750) = 175d1a3103f57e544d1594ce9c818886 (name+title)
GUIDs
36
Filler GUID seed
new Random(276).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
221 · predicted N = 36 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303061750 (name+title). Key = MD5(password) = 175d1a3103f57e544d1594ce9c818886, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 6c236d00-1b96-8abe-9e5f-cc91b0e8caec
  2 adfb4d76-4aff-7b76-9e64-aa23404cc40d
  3 1a58a2a3-2410-6acd-96ae-9858f8f55267
  4 6299500d-3bf4-4bd4-9119-61e8c4eda3b2
  5 b23cc0fe-239c-7c04-86be-7ff1b96784db
  6 15e90000-8938-6562-87f9-f7605edd768a
  7 1734bb67-3283-586c-9ed6-abb9242bd03c
  8 fde5bc56-7549-8958-98c7-65fc4ef85fd7
  9 74cbe786-a4ba-1f1d-8986-e168a7d7ac6e
 10 7d460174-b712-0944-a3fd-c2bd585e93aa
 11 b8ef294c-8353-5bd1-8bd7-faae48b58ff4
 12 9599e8a8-9e47-8183-95a0-8782954a02ce
 13 4982def6-1569-3298-ab3f-d257e65e5528
 14 e83b9f9f-6bcc-0918-bb14-ab61613a66a1
 15 e95cbc88-402b-101a-b6fa-fd2adf26975d
 16 4a9b7251-2206-3d70-b323-5b1adae2574b
 17 46920117-8e30-774d-8906-e630e1e19d65
 18 a18202a2-9b3a-10c2-b6a1-78a85128175e
 19 489daeaf-1207-1b32-a967-e781e36f526b
 20 b1e22927-f4f0-1fae-8f9b-fc591dcaf972
 21 fb079ead-7310-4164-abc5-e927ba1cca7b
 22 f0a68e82-ad82-5a44-81d1-e2555f097e27
 23 4e904ef6-8614-5dbd-a4b5-7046d557726c
 24 dbdce01f-4050-4b31-b3a5-6ead064385eb
 25 6fab7877-a1b9-6b5c-8539-7f4e71a60759
 26 ab173235-6f61-060c-9b5e-fba5ea17d48b
 27 1b6067fe-14d2-2ac9-9ece-c420d6eb4efb
 28 b0c38857-9dfc-65b0-b2fe-e670a1887fe7
 29 0c14ae5a-8b7e-70da-b1fc-5b49f8af0c88
 30 8d73302b-1ed4-3724-a9d1-da5471c0639d
 31 0983e41e-749b-019d-aa3a-239a0f64cb31
 32 80b8268b-f117-1b79-a467-0b1ae2bf2afd
 33 4ce16de5-7797-2f46-9332-e6524a657292
 34 853a2d23-3434-879b-9e3e-e5c21b377a5d
 35 74a8b153-8245-06bb-9d39-e2343cc5f29e
 36 0e20d6a4-0a74-6405-98aa-faff1d280f0d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 876476581058301371114554602673012806. Exactly this sequence comes out of new Random(276).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 221 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs