A858DE45F56D9BC9 archive

201303300039 1b8rs7

explained decrypted filler

seed 511

Metadata

Post ID
1b8rs7
Title
201303300039 → 2013-03-30 00:39 on A858's clock
Posted (UTC)
2013-03-29 14:39:59
Timezone
UTC+10 · title 00:39 against posted 14:39 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303300039) = 306387ccac493002a9d7a362a6cdcefc (name+title)
GUIDs
40
Filler GUID seed
new Random(511).Next(9) ✓ verified
Run
Run 43 (seed 120,022,078) (seed)
Draw
68 · predicted N = 40 ✓
Machine boot
2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303300039 (name+title). Key = MD5(password) = 306387ccac493002a9d7a362a6cdcefc, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 78593695-7a40-6a6a-9536-f609aa315890
  2 882ea680-bce3-6a1e-b7b2-ea77a9f00446
  3 aa0935e8-b4b4-849e-b1a8-ca04b72e9e37
  4 b2201967-fbbd-5f00-9afb-7eba6117339a
  5 c99d5696-b5fa-841e-913f-23b1688ffa42
  6 4a0f6d3d-ad2e-198c-848e-3bd38ae41745
  7 8fa1a9d3-fb99-715f-8520-4eeb49ad2835
  8 b68aef17-dc41-719d-a8f4-0003d32551b2
  9 189b89cc-f28f-19ee-a339-157fc279afa8
 10 8a846e69-d3ad-6f4f-80c3-8c4ed101a67a
 11 6fabac90-d287-6cc9-a97f-36458f4dc8c9
 12 2314c836-96c8-38ba-86c3-4406cf038860
 13 c21a49d9-9689-8c92-9f6a-56e8db85887a
 14 40e49f71-485e-2e92-94ab-ea20fb410ec1
 15 1b52712c-90b2-6a7f-b2e9-0784856feba2
 16 9948c4f1-2b1a-1dc2-957f-d05885282d12
 17 344e70c1-aebe-5171-80e7-c079e7149fc0
 18 90fabb93-1447-79bc-ac5a-efe8afb5d872
 19 f95b0a7d-4bb0-4a3f-a73f-c34fb8c8da71
 20 52b01196-10cb-1e98-b7c9-f24f56ebdaa8
 21 17089b66-2f31-666c-a736-fa59cbb5be3f
 22 d84bd3f5-9408-1ca7-94b8-e5ceb8924291
 23 17006554-d7d4-355b-ba7b-ebafa80db2a2
 24 e81f00fc-88a0-463a-936f-6cc46f31a285
 25 c32da1d8-c267-784a-8a1f-9e58cfd92c75
 26 4505b9e2-5c39-1ffc-9783-a5de3da82b77
 27 318af945-aef3-23b5-9403-8bd286a6da7c
 28 733ad656-811a-2fbd-8add-64ea5448d99f
 29 a6bae145-a660-6f37-a112-a53ab02e79b3
 30 981942ff-3080-5233-9136-1e3df708a30f
 31 c052ad64-cfca-754a-8cf9-eb58306478f9
 32 1bcebf25-500e-0242-921a-74ba6bff3063
 33 fba34bc7-666a-755e-81a6-d25c5df2e557
 34 1324ee74-5346-78fe-b926-cdd6e4af8e70
 35 6504bd73-3c8d-06a6-a5f8-38bf2f0a8118
 36 220f5e85-efa2-8944-bb3c-9b45f28b8868
 37 5296cf62-f92b-2f17-8d1a-0fb55392b78f
 38 6beaa002-c762-5a6c-8e87-b1fa2b56ed8e
 39 48b4727a-9a3c-72ff-869c-a78665785e02
 40 6ff8f98d-e82c-07fb-9e82-c205860f6291

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6685817716638261574161347122657077082570. Exactly this sequence comes out of new Random(511).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 68 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs