A858DE45F56D9BC9 archive

201303240159 1av2s9

explained decrypted filler

seed 43

Metadata

Post ID
1av2s9
Title
201303240159 → 2013-03-24 01:59 on A858's clock
Posted (UTC)
2013-03-23 15:59:59
Timezone
UTC+10 · title 01:59 against posted 15:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303240159) = 69a3f70a350b970b71a66e96808b402b (name+title)
GUIDs
40
Filler GUID seed
new Random(43).Next(9) ✓ verified
Run
Run 43 (seed 120,022,078) (seed)
Draw
5 · predicted N = 40 ✓
Machine boot
2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
7 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303240159 (name+title). Key = MD5(password) = 69a3f70a350b970b71a66e96808b402b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 116c7e59-a9ef-11b9-ab6a-43aeb24312cf
  2 25d66264-d279-3169-bc14-0718c565d83b
  3 da531168-ecc8-7c1a-b688-8def8b40a48b
  4 34cf1ff3-a42e-6916-9f5e-59037ed1cef3
  5 1c548f43-1140-5169-943a-528138b30970
  6 6affadf3-5665-1927-a2c9-2c25c82f2b0a
  7 1a8234c7-1d2b-176a-a815-7e8f884b4eaf
  8 4f94caf9-5ef9-0a8f-b7f9-95eb12f2f31e
  9 d5c0432a-380c-2e3a-b4ab-e0e683248bf4
 10 30623c75-ccc1-1934-8936-5a82c298571b
 11 14b73872-1e87-8889-bc83-1416a8b7935d
 12 ecff9463-3995-0590-8309-689d260ab6e1
 13 2a999f6f-7200-19a0-a0cc-b6f7aaa6985f
 14 d5566b1d-d545-708e-9828-d61beaa36779
 15 eb5ea881-2b0a-0760-9fed-a34006253f12
 16 3024182c-da49-72a2-b273-8f2a6ab0f00c
 17 e1aed993-10d1-8319-9d10-f4a4e0bd2feb
 18 2066c271-4d91-5846-a669-f34aac3a761d
 19 1db6de61-64a0-75bc-845b-ef6c5cf6a867
 20 e678df0e-4f88-8061-8672-f4cf8e2d9e52
 21 9293700c-e837-4553-870b-b2c1883f00ba
 22 a7677b33-0caa-3e32-ab0a-07341ba6dec1
 23 f83ea52d-7c89-2004-b477-e47904986a4b
 24 8bcaf5e9-a988-02fd-99ed-bbe84ff9e790
 25 4a5da70a-0128-8f0c-ade8-a87294e0dc90
 26 f833e283-ca3b-1c1e-aaca-d4791697ba01
 27 a107c7e3-8dc1-84a7-8d2a-305778d9c291
 28 8125f472-3603-27e6-86c4-5b555f9e26ef
 29 f4140cc5-649a-3687-b52c-8437b95e6009
 30 e50206d6-b5ce-60b2-8e3d-90da3e16e642
 31 ba1e44c3-a582-05dc-9630-c2ab8ae8e5e6
 32 2b3fc836-435a-70f3-9897-5fe3ed44a03e
 33 679c468b-05b0-5991-ae08-8f0e6e22831b
 34 4acd81e9-2e41-0a4f-82a6-ffe8b01a3fb5
 35 82d11ab9-1ab4-5af4-ac16-d293aafc498e
 36 b4574786-6ec6-51e6-9b0c-51d33fd97f23
 37 01251dfd-4f37-59df-a3f7-c4b15d8c8ea0
 38 f24c6cda-3958-681e-9a56-67760ac9c8b1
 39 962c148e-f939-6ea4-89c7-e2abdfaefd73
 40 8dda5d17-8753-3598-ac2b-e31e36935672

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1376511021801707857843208182360750555663. Exactly this sequence comes out of new Random(43).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 5 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs