A858DE45F56D9BC9 archive

201303282354 1b6d3e

explained decrypted filler

seed 516

Metadata

Post ID
1b6d3e
Title
201303282354 → 2013-03-28 23:54 on A858's clock
Posted (UTC)
2013-03-28 13:55:00
Timezone
UTC+10 · title 23:54 against posted 13:55 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303282354) = 63a20b7b905f2d141d0f947bb9d6abcd (name+title)
GUIDs
32
Filler GUID seed
new Random(516).Next(9) ✓ verified
Run
Run 43 (seed 120,022,078) (seed)
Draw
41 · predicted N = 32 ✓
Machine boot
2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303282354 (name+title). Key = MD5(password) = 63a20b7b905f2d141d0f947bb9d6abcd, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ec4ef088-614b-269d-a259-5b9eab373c31
  2 ac64cf59-2871-1f50-bb5c-6d56702f95c1
  3 7ca4a0e3-eb39-4852-b9b7-ebb0d6af32f5
  4 8b1f8a5c-fcf0-6a65-8323-4963120386ac
  5 545e6db9-0d18-192a-9f9b-4daeb4de6c11
  6 9e3c1020-dbaf-4b28-bb27-2dbc313f5958
  7 7e788a8f-d31f-05ff-82a9-6b08e4ce902e
  8 da56edac-0631-2482-a065-88261b569962
  9 e335acb5-4427-7547-a269-121694071675
 10 7bda722a-65f2-490a-8b47-58708518022e
 11 3c245173-668d-4302-96bb-dd0210048c25
 12 4ad9f2c9-5b26-2c92-93c2-9da50271eb28
 13 118949c6-f152-3cba-b0e2-f76154cb9031
 14 4f6b9912-8137-8470-9054-db76836d37b7
 15 cbd30f35-3693-17b2-95ad-64c057d89fd6
 16 bc8ad7cf-ee0d-219b-a449-323fa6cf8d21
 17 9de78903-4366-662b-98aa-5a64c3d31f5c
 18 26d08a33-dc7a-86eb-adb5-9eac59d4c4db
 19 897df07e-b426-5abf-ac56-ff6d55782248
 20 ce3b4ee7-adfb-18a9-a800-2f4d797570ed
 21 f5994fd4-7f14-3bea-8ee4-aaa626d15f9a
 22 5d9a2bd8-9b39-3ad5-9b90-40ba9079f71f
 23 35506d75-d4f2-134c-bce7-90d726370914
 24 973e3a15-272a-271e-ac61-40d86a0f93bf
 25 7a3deb0c-c7e6-2edf-a712-34b0523741dc
 26 7b45bf90-e7b0-386c-8c3e-d6dafdf39a61
 27 0f56b30e-f00c-5b15-bde7-1ea1cf8de0b8
 28 92019a38-2cd2-3287-8ceb-8a541629af3f
 29 aad6d249-0975-0a2a-a636-e09e88aa42d7
 30 85aed6ed-5ed4-50bd-b4cf-8e61016a796b
 31 7f736d5d-bf23-6b52-8fb7-a2cf569ee750
 32 a582e1ad-c0ed-38bc-bb72-9569fcddcf88

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 21461402744238126851331223530563. Exactly this sequence comes out of new Random(516).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 41 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs