A858DE45F56D9BC9 archive

201303070344 19u4st

explained decrypted filler

seed 785

Metadata

Post ID
19u4st
Title
201303070344 → 2013-03-07 03:44 on A858's clock
Posted (UTC)
2013-03-07 08:44:48
Timezone
UTC−5 · title 03:44 against posted 08:44 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303070344) = a3e323486094fe5361b0c882dd0282ca (name+title)
GUIDs
40
Filler GUID seed
new Random(785).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
230 · predicted N = 40 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303070344 (name+title). Key = MD5(password) = a3e323486094fe5361b0c882dd0282ca, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c003e855-91a7-790c-80f3-cc4c491f2514
  2 7352d75a-7bdd-1bca-a849-eccfa0d9e3f9
  3 8e361900-7aee-41be-ab79-2f2f2716ab15
  4 5a8465ab-54b2-0a43-b8f6-5d8e6ebeae52
  5 b81ff2e5-67b1-5ef2-83e5-2f76e37df9e0
  6 63a491da-ef53-5415-bfb3-fe0413dc9558
  7 50c590fc-ccac-5f39-8ba5-30c9ec1a1c61
  8 aae8c2c8-40ae-2efa-abdc-9ebd8f7229de
  9 b8e08469-35f7-0590-98f8-534e62b63086
 10 7c2bea82-6b0b-693e-9c77-900fd7c97fd0
 11 4cd5f730-a0ff-57c1-b38e-89994758b000
 12 7c73f37b-b083-26de-81e0-6d4d7f09a89e
 13 194edc99-8048-21ba-bcd6-0bd66d9b61c5
 14 2bef82fa-5934-767a-8a2d-de6c055d014d
 15 b5ad67aa-6c32-413c-8cc4-7a73165714bb
 16 12a5c2d7-d06b-20e4-ac7a-e3b5bec0870c
 17 8017b2a1-bc6e-718a-8c4f-60333bfaa236
 18 6d175e18-62fc-6030-bc20-8b7313acff91
 19 e087d1cc-b3e7-807c-8a46-562d652fdf97
 20 a6873f07-e385-27e9-95ee-28bb3e263cfe
 21 42f51046-e04e-17ce-a0b3-d2a9028c73a6
 22 26e4817f-65fe-3546-9bb1-c2340ef4c381
 23 c2c8148b-819f-5e89-b7ef-e96d9730196b
 24 bebfad15-35e7-2ad3-8a51-eb936d1593b9
 25 88616e4f-8f8e-5133-bcf5-c6a57e9a5226
 26 71f5039e-2db4-36d3-b7a7-57d1197c01e6
 27 ba598c3e-498f-7db7-be40-c5e9ec61fbda
 28 d3809259-7db9-0b5b-a06b-ef5aa59beede
 29 f69e13b6-e13d-32eb-bcd7-1936dbf7a59f
 30 6517a914-0fb9-251d-a9b3-87446f826c5f
 31 08e4c340-a578-833f-99f4-880051e00d58
 32 1714be34-be22-2224-b4b7-9234541bea8a
 33 61926d82-7397-8b0a-911c-0f7549ec95f9
 34 e2579d99-55d4-6f25-83a1-49b27cab4d74
 35 e018577a-6dd8-60fd-8df5-2b6f9bc0eb66
 36 f99b9b4c-aaa4-74c1-b15a-0e44539fc13b
 37 fc54e847-1158-2177-96aa-95d23c3279ed
 38 707ba3f1-63b8-3958-a438-70e053660082
 39 8d72f591-d533-6746-8892-ddc5cd81b3c7
 40 c3690bb1-301e-6b03-a949-56782dab0634

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7140555206522742768213525370328286672366. Exactly this sequence comes out of new Random(785).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 230 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs