A858DE45F56D9BC9 archive

201303242159 1awro9

explained decrypted filler

seed 98

Metadata

Post ID
1awro9
Title
201303242159 → 2013-03-24 21:59 on A858's clock
Posted (UTC)
2013-03-24 11:59:58
Timezone
UTC+10 · title 21:59 against posted 11:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303242159) = 7f13285d95911887fc481da2fd1f0f4b (name+title)
GUIDs
40
Filler GUID seed
new Random(98).Next(9) ✓ verified
Run
Run 43 (seed 120,022,078) (seed)
Draw
9 · predicted N = 40 ✓
Machine boot
2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303242159 (name+title). Key = MD5(password) = 7f13285d95911887fc481da2fd1f0f4b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 8a169e30-cb6e-84cc-8804-61cb5e2916f4
  2 4a30936c-188e-5112-9d82-56f66dd6c087
  3 0cc38e75-9b4d-2271-b8f8-ab42569fbcb8
  4 87c28158-191d-4ed4-8fef-79f00667769c
  5 e72e2f24-673a-452b-9cfc-626c31ae4413
  6 57a0e885-6ab2-1f05-92d7-b058e4d6e7f3
  7 7c2bbfce-3d8f-78a9-81d9-fdb10489ef7b
  8 4eacb4e2-2c7d-5996-b715-2712ce90ca83
  9 7677a007-4095-0bdf-bf6c-a1b7c0bcf4f1
 10 f8c40572-b6f3-30e1-a417-0b36a2970c40
 11 d4bdd492-ebb1-4a67-9ccc-fa8a18883c52
 12 eb808252-e105-8248-9d5f-1a9482694675
 13 ed7949d2-9f4a-0ded-9c85-5d1fa2e214d0
 14 962a65de-7378-4749-b105-ca78d34d7cd1
 15 5a06fffa-6ac1-5730-9801-ddc9571fd6b3
 16 fb561d77-ff0e-29a7-932e-f8e30b355d6f
 17 73a4c1b8-5e9c-054a-a525-377fcb81766d
 18 b3387ab8-83fa-6934-9d19-4e47d8bf24b3
 19 f941d5a2-4da0-2c0e-8c92-51a1c34557ae
 20 ea1c4f1d-e139-20bf-a9d4-6fc9cadf28fd
 21 19cfaccc-2aa2-7618-81c4-4f7071851d5b
 22 bc3066b9-18be-8d5a-bf9b-44711d485220
 23 38db8ca9-fc0f-464d-bd85-0089007d3f8d
 24 b706352c-2f67-23b0-b55d-70ee6e3531f3
 25 d1c285db-4835-2a4f-86f6-07222f85052d
 26 572d605d-e8fa-5434-830e-3caf9c42182d
 27 4ba64c7b-fa27-1248-98e6-916baa4454ff
 28 f2639186-39f9-36ae-9d73-de0245a09c2f
 29 5855a55f-890f-5d11-bf44-52fc3144b4f9
 30 4663230f-925f-0020-b984-4e0030618cdc
 31 7e4513bc-4a1b-3588-a45e-80d37e67d6c6
 32 bec1e925-3a4d-2643-8546-e9e21d1051a0
 33 5d7f695b-c666-6ad7-8b1d-3743b2a4a71a
 34 1bc90486-b581-4c72-a56e-e9e099c25bf2
 35 380a9ef8-1d48-7753-baa6-6eea8b636496
 36 21eeea79-40e0-0b81-a1b6-a2336694e932
 37 c80a1e1b-5c12-1111-87e4-1f6e7746567c
 38 714af0d5-707e-10e3-9189-8d90c7f9e170
 39 7fe49ed2-aac6-13db-aeba-bb5f58d3d41c
 40 21c97bdd-5604-55da-8171-8ecc08b67e09

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8524417503480452062278422513503264701115. Exactly this sequence comes out of new Random(98).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 9 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs