A858DE45F56D9BC9 archive

201303072014 19vsn1

explained decrypted filler

seed 950

Metadata

Post ID
19vsn1
Title
201303072014 → 2013-03-07 20:14 on A858's clock
Posted (UTC)
2013-03-08 01:14:48
Timezone
UTC−5 · title 20:14 against posted 01:14 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303072014) = 54b8417436427ba8464c21dc81b0cf4e (name+title)
GUIDs
40
Filler GUID seed
new Random(950).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
245 · predicted N = 40 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
7 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303072014 (name+title). Key = MD5(password) = 54b8417436427ba8464c21dc81b0cf4e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 730b847d-056e-00fa-a79b-3939cdb6b194
  2 6935b4e3-9a9b-594f-a796-102df03131ac
  3 3949e7d1-7cdb-7ad7-afe1-17358fdb3b85
  4 66081c53-bb44-22fc-a4bb-c03905c513e2
  5 d036c3c5-7bfe-1778-bc86-e6fb1bd0a8be
  6 d835790b-1a44-62b6-afb8-d9828888370e
  7 a6db84fd-d73b-57ba-a0b1-1bdd3a43dfaa
  8 1eb22411-ee4a-00c1-b8a8-d4df2654ce01
  9 02268106-bfe5-4012-ba2d-fe789681deb2
 10 858dd75f-4248-5020-a0ca-ed7f2c06ef4c
 11 8027632d-8f6b-14ab-99dc-1fc0cb6933ca
 12 23eb7a96-bde1-141b-b596-de0a06262636
 13 c3b24358-3b1f-621f-bf03-441535e60bb1
 14 f9a587da-85d7-6893-8b13-5d067a8d4cb1
 15 9be5f60e-21e9-89f6-aa30-c8268ff6a779
 16 248917c3-2461-2249-bd16-5dbcfe27c904
 17 c0ce886e-2bfe-1ac1-a347-672470e902b7
 18 8cb1766a-3b12-8299-baec-4b9c79752ccb
 19 f688c5da-bcea-3893-896b-c7ba8ef5afd0
 20 f3aad99f-fec0-11e3-9dc7-5f472b5876b1
 21 a17010c2-7ef3-0d59-9dce-9a844e0b2ac0
 22 f7195354-6da1-8cfe-90f6-9e886bf60f53
 23 0a98e4b7-cc3c-4154-a6de-93063569666c
 24 b1965955-bada-8d36-afbc-c320a88d9614
 25 11e3eb43-9d13-7fb3-9b0d-8de1425f6e13
 26 f1ea6f17-1f1f-420a-b110-d6a5e4736674
 27 5936173f-7a11-6ea7-accc-97440073606d
 28 48a847fd-5ede-286a-adca-99dcf6477111
 29 5742d17e-dd16-8231-964e-59f3e40a1677
 30 005a5480-734a-1f1e-8eea-9eb2d7d8e2f4
 31 0c889f4b-5b61-8259-88aa-f5bbc4fed561
 32 4838d5b5-6699-60d6-a275-ee60e2d92e1b
 33 b93130a2-92d5-298f-aa3c-52e475bc8798
 34 a4db8e5a-c67f-72d3-ab61-9e4690abcff8
 35 10a4cdb1-3afe-3f8a-8869-008148ad9845
 36 3a31203b-6775-8d03-85e3-ca6934876dfb
 37 ccf46d5a-4242-86b3-b837-6ccc573f50b8
 38 71ff0c87-4815-7113-bcf9-c74ed168dbd8
 39 cd727e35-f541-0110-8196-ccb4062edc03
 40 1bfc2872-cc22-31f6-9477-23f43335232d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 0572165045116682183108487462818627388703. Exactly this sequence comes out of new Random(950).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 245 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs