A858DE45F56D9BC9 archive

201303070238 19u2h6

explained decrypted filler

seed 847

Metadata

Post ID
19u2h6
Title
201303070238 → 2013-03-07 02:38 on A858's clock
Posted (UTC)
2013-03-07 07:38:48
Timezone
UTC−5 · title 02:38 against posted 07:38 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303070238) = b66983affa8a818cb2310e477c7e1334 (name+title)
GUIDs
32
Filler GUID seed
new Random(847).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
229 · predicted N = 32 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303070238 (name+title). Key = MD5(password) = b66983affa8a818cb2310e477c7e1334, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 be5a62c8-7ad7-15d4-96d9-203cbf017a87
  2 9baa8426-90a9-34a3-a82e-2128f2a4195f
  3 3bf57a82-b365-7f45-a206-13889a665967
  4 5e3b4e25-5b4b-31d8-bee8-1d8e702d1fff
  5 6b894880-704e-526b-b6a7-a0591778261a
  6 f48c0774-5190-6d64-90c1-96e4024fef29
  7 08bc4187-452d-38f6-a42e-c4fe29e50aec
  8 22cc02f5-b7ef-300e-abca-ae9e347338f1
  9 ac22fdad-3ed6-6687-af60-7e48cc21719b
 10 685c61a2-9018-5d0b-9455-66d7b995b72a
 11 3d659cf2-da07-2230-963a-60d1f5168afd
 12 741fd159-6fc4-6f58-897f-0a8f24dce572
 13 0b9d566b-8a21-836e-a14a-0fb2caaee70b
 14 310b644d-3093-14d4-a25a-19db2eaff09a
 15 3a20dbd0-ce0c-7294-9db0-0b7b84fcdfe8
 16 87a14e2e-0ee1-885c-b927-f1154be7b6d6
 17 5dd181de-ee18-8d32-90c9-1f2383e89e82
 18 b68f0907-e5b1-18c6-871c-980b60cb2cc1
 19 d214abcf-5f1e-5d92-a269-76e4c1a7a211
 20 7ac5433d-14ba-2f4a-b2f2-5ec6dbdcb805
 21 dcbf7f44-60d0-3954-ab23-8a7b85f43414
 22 9cdb0167-4b46-5da1-b166-cbbfba27f066
 23 eae56bdf-2615-15d2-a578-be7f89adc114
 24 11d92f97-ca34-8f27-94d3-083996ab22cd
 25 6f3d2077-4f62-696f-bb78-32f648cbadb0
 26 20fa7ae9-13bc-2476-8de4-2f054eff971e
 27 2d836352-851b-1ca4-ada4-5a0581d34328
 28 9e59beb8-3dcd-44fb-8c13-0e40fea9a303
 29 c194d8bf-56fe-46e5-bcb8-869bdd1a96a3
 30 e4b1769a-2eea-1a0d-886d-4f8fb98b4011
 31 3dc01123-3181-74b8-9c77-8b974ec88e42
 32 495aac46-8b0f-5414-9c3d-1f0352db4414

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 13735633652681788152351862144175. Exactly this sequence comes out of new Random(847).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 229 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs