A858DE45F56D9BC9 archive

201303281539 1b5v4t

explained decrypted filler

seed 899

Metadata

Post ID
1b5v4t
Title
201303281539 → 2013-03-28 15:39 on A858's clock
Posted (UTC)
2013-03-28 05:40:00
Timezone
UTC+10 · title 15:39 against posted 05:40 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303281539) = 46dc4fef38689a7ee20a3d26f30b7ac7 (name+title)
GUIDs
40
Filler GUID seed
new Random(899).Next(9) ✓ verified
Run
Run 43 (seed 120,022,078) (seed)
Draw
32 · predicted N = 40 ✓
Machine boot
2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303281539 (name+title). Key = MD5(password) = 46dc4fef38689a7ee20a3d26f30b7ac7, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c0f08347-f131-31d0-b70a-44819df07365
  2 901b08b2-07d9-5b78-9928-9600c6af42f9
  3 08bed972-7f56-1946-99a2-ddd606c59d86
  4 d621328f-d589-3b62-afd7-35696bf887d0
  5 d2a750de-9484-0528-a8ec-a8312b782fab
  6 e0c0eabc-54de-13fa-93f1-cf0efa828498
  7 9b1072ab-3a56-6cee-8387-71e69ad02dbd
  8 b1110936-ed7c-4aa7-90cb-1c3e61666bd5
  9 2c6cf274-d32a-1eca-9d9d-77dc09d6a530
 10 1dc3eebf-ff69-79ea-b584-31b020707cd4
 11 48d834e8-b0b0-5d73-a1fa-bc66410416ef
 12 7e72ee39-8d93-2163-bc2e-1909b6583213
 13 b4195344-5c84-583b-96b2-f199bf41d7b9
 14 63731b6f-0f6a-177a-a8c5-6cfc0b6df66b
 15 f414bd7d-c26f-220d-9427-98784427a221
 16 289d373a-7046-4829-8f14-5669223d2a06
 17 7ab2b7c7-14ab-6ac0-b830-46f3f30d74f9
 18 3befeb11-e399-3284-aa86-59b8c8cc0580
 19 54e9f2ea-c984-0c4f-8bb3-34ac29f5b5d6
 20 676d3257-a4a8-3dcc-849e-b0e49ebf7c2a
 21 02e7dd84-a65e-2f0b-be39-6e20cf69026f
 22 ffd300ea-7893-3841-a505-fd02c8ec45f2
 23 115baa19-693c-86f1-957a-81ad0d9899e6
 24 d3736d82-e5b3-0249-ab1a-c0d4692323fe
 25 416f15d9-c2af-7bfb-a849-0ee88d686e8b
 26 0849cb20-5082-6238-abcf-aefb191c0338
 27 16d94f3a-4ac1-7acf-af1f-4f98558a231e
 28 f6677598-b484-647e-ba5a-26d2b98a3917
 29 68039127-b605-74e2-b808-5cdea15855a4
 30 4d4b2d7e-b6ef-071b-9f7a-9c568c9a5db3
 31 bf053cc2-c3e7-02a1-bf6c-bb44d4fe1627
 32 8753123c-1868-204a-a80f-8340889be766
 33 d9bb6075-4bde-7088-be66-fdf4c330ca49
 34 782f688e-e32d-4730-b74b-eec676ac9655
 35 0300d044-131f-40c2-a0ee-75a0ea717b87
 36 d42dbb9a-aab0-627e-be7a-10602099b55b
 37 b7db43de-e090-6465-82ec-7be5543d2982
 38 c8b99d36-c79a-0aeb-9a60-17473f623e8e
 39 9d934dd4-7f94-267e-a0ab-da6778ac8142
 40 ccb8a3ba-70d8-365c-b235-2c8f68e0a54e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3513016417525124630323807676700274466023. Exactly this sequence comes out of new Random(899).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 32 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs