A858DE45F56D9BC9 archive

201303251259 1aya8m

explained decrypted filler

seed 335

Metadata

Post ID
1aya8m
Title
201303251259 → 2013-03-25 12:59 on A858's clock
Posted (UTC)
2013-03-25 02:59:57
Timezone
UTC+10 · title 12:59 against posted 02:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303251259) = af16384c94b8ff1b04c9a10018e28e74 (name+title)
GUIDs
36
Filler GUID seed
new Random(335).Next(9) ✓ verified
Run
Run 43 (seed 120,022,078) (seed)
Draw
12 · predicted N = 36 ✓
Machine boot
2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303251259 (name+title). Key = MD5(password) = af16384c94b8ff1b04c9a10018e28e74, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3dfe5ff1-f263-65c3-be18-a8ecd9027164
  2 0e4305cf-5273-1393-a7d2-16591e6b5c48
  3 6dd883b9-3104-8a5a-8d53-6554e002997d
  4 af580196-717b-0b38-9a73-dd9f81aa4a35
  5 3aa9bb95-76d8-4ad4-b72e-1b03673f2ce3
  6 9edfbf58-18ee-255c-85c7-10daf84f5c18
  7 cc56fdfe-adf3-0906-ac82-ed2c4ca6f0fe
  8 03ede558-f891-4a6c-affb-ac93f22cc041
  9 9308971e-161b-32e5-9dbf-fe498a93a651
 10 6b7c08e5-be11-795e-91eb-9f318ee6f295
 11 c6fc7319-056c-0c45-8405-9d67b3215c64
 12 d5ed55da-19b4-0438-9c5f-bffc5a688c3d
 13 5f6e1b1a-28e8-8c89-8d02-a154f8b03d73
 14 16955c4f-0b22-68aa-bd57-8ceb3539a255
 15 df354422-fa62-470f-9fe2-1117884a4caa
 16 2945f956-d575-277b-a488-2d1c3be13713
 17 31c32c2e-4d58-6e4b-a9b8-323fe7769165
 18 18baadcc-ca1b-6061-ae37-bfe8920e7876
 19 24bce097-7d7c-60fe-9c65-6f7deea44e32
 20 2a29e279-9f2b-079c-8c03-5fb61513f4c1
 21 242f40a1-a198-2c46-8fb7-6978cdd87e49
 22 b1651cd3-7256-0794-a9d9-701c36b9e340
 23 a9a4213b-a9d3-523c-9dcd-ab16957e3fc7
 24 7ac31729-3629-05e5-b540-29514f316f78
 25 ec8df9b6-e78c-433a-a6f0-27b64e40db8c
 26 973b9c93-4f02-8bd8-ad7a-da5ea3ffcd6a
 27 3e289dc4-ef6f-86c6-8673-45980c93a744
 28 5d0089a0-6a40-28a7-92cc-3d531610635e
 29 ace30112-e59c-0fd8-81f3-1c921db52863
 30 09d1da68-8eba-71a0-bc6b-37de399e58af
 31 df7fa032-3edb-7ce6-aae2-8983f63e08aa
 32 6dcdb839-af1a-60ad-b900-f1f751c73183
 33 0b7822fa-4b6e-080f-81c2-ca6708dfccbd
 34 ab1c836f-35ab-3b05-82d4-02dac0620031
 35 4dbbaaff-f9b3-5e32-a481-68d4d5e43b53
 36 d51ecb77-1c68-2fba-96fa-e7f4c8db42c0

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 618042043700864266602050488207760352. Exactly this sequence comes out of new Random(335).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 12 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs