A858DE45F56D9BC9 archive

201303081920 19y0kw

explained decrypted filler

seed 846

Metadata

Post ID
19y0kw
Title
201303081920 → 2013-03-08 19:20 on A858's clock
Posted (UTC)
2013-03-09 00:20:46
Timezone
UTC−5 · title 19:20 against posted 00:20 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303081920) = f6ff2e2560a0d53f1f48cf101a879aef (name+title)
GUIDs
40
Filler GUID seed
new Random(846).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
266 · predicted N = 40 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
11 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303081920 (name+title). Key = MD5(password) = f6ff2e2560a0d53f1f48cf101a879aef, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 70b1eeb5-df1a-6850-aaf0-56d2c85369b4
  2 12fdfacc-e3a2-0b95-9b12-28dc876cba38
  3 8df693e2-18f1-10a0-9dd9-5a1d6b1be205
  4 d26658d9-e3f4-17ab-96fc-c83ed9fe6390
  5 2b1fae83-dff8-12db-925f-5420d41d4543
  6 744291ac-426c-7662-a479-df943838cbd3
  7 0ac51ca2-c5eb-8f05-b16c-5d79e3ba650e
  8 08d9b1ba-c579-7470-ae84-32c39fc4bee7
  9 673a012e-a7e3-584a-b50c-d157497976f3
 10 2a42b707-474b-2518-b268-5b26892ca650
 11 5421cce1-5d61-58a3-995c-6411a573fa54
 12 e18cedf6-b12a-819f-adce-1ae9967231ef
 13 1ec8a015-2d4e-1a51-b30c-fc8f2d34305f
 14 e3b1e7a0-be69-561c-862c-d9904359054d
 15 1d58669d-0efd-1c0b-bd08-6b3992aa62b9
 16 b5ac9f88-1d49-3a2f-9a95-c64269054b87
 17 f8a7d3bb-7dcb-430c-a546-00e71f4769fe
 18 a91d56f5-6b5a-48d5-b3c1-e7f6efb14e58
 19 86ea582d-6227-57ea-ac94-4262b0d93d28
 20 f29c9ca0-3f16-880f-b151-babc73f18241
 21 398bbf11-6058-21a8-8393-b9b3ddd1e6d1
 22 d07d69cb-6891-3316-ab7c-b2e1def33d8c
 23 7b50da63-7c1c-8bee-8bc5-96bb660c9de0
 24 6610bda3-aa50-5193-9780-56a090936228
 25 41e227e8-c798-53b3-b71b-b9eda98a5784
 26 4c8a5dd2-9400-53d8-a9c6-c3c91c239153
 27 f6e2b9e0-de53-23d4-8296-aaa4b91c9e25
 28 52cca1d7-0da9-74ef-9c0d-b910ca0e5119
 29 6318b4c6-cb3e-2ede-bf9a-ea1c6d5e5859
 30 4f7e8094-f42c-3218-8e40-52fd87554b85
 31 3dd79edb-93a7-4280-bd83-36681426e780
 32 11ace6f7-bc64-24fb-9113-5fe9f8d084ea
 33 816798ec-9e9d-480b-8d5c-4b0f7aa05aba
 34 b57395c7-52d1-140a-b7f6-7812db1a16a1
 35 ff1ba750-8a9a-0621-8ea5-7cf93dfca744
 36 3b697d8e-191b-393a-a788-357a62aa7580
 37 3a4f26ac-d435-7764-a592-afc384abc5c0
 38 63b30490-1a3c-8431-b87a-908b3daf5ffe
 39 03a94897-58ce-2b1e-88fa-4abe2841315b
 40 696960ae-8aec-2796-ade3-980d80591fc9

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6011178752581513445823855527234241037822. Exactly this sequence comes out of new Random(846).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 266 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs