A858DE45F56D9BC9 archive

201303300134 1b8vd1

explained decrypted filler

seed 423

Metadata

Post ID
1b8vd1
Title
201303300134 → 2013-03-30 01:34 on A858's clock
Posted (UTC)
2013-03-29 15:34:58
Timezone
UTC+10 · title 01:34 against posted 15:34 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303300134) = ca243b22c7206c4751debd974a24064d (name+title)
GUIDs
40
Filler GUID seed
new Random(423).Next(9) ✓ verified
Run
Run 43 (seed 120,022,078) (seed)
Draw
69 · predicted N = 40 ✓
Machine boot
2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
7 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303300134 (name+title). Key = MD5(password) = ca243b22c7206c4751debd974a24064d, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e5e8d594-51b3-68ed-810f-5822c9916af3
  2 cc7d628b-926a-8ac2-9b03-c868c0228ee5
  3 7fe1668b-a77e-3cb0-bc7a-51d77dd64114
  4 695bbe47-ea5c-755c-9215-19bf617360fb
  5 977a68ae-4bf4-10a5-947f-ead62391b317
  6 5e2be8c7-c3bb-14c2-aa51-ce9de834112b
  7 d81bb8c1-46d4-33cb-b51c-3afbb0287d3e
  8 e767bec1-0ba0-5649-92c7-8db7ccfb3576
  9 d5287761-6da9-2040-80b8-6cbbbe1109c9
 10 907b98fd-401d-2855-80e0-8785d0dc1f05
 11 47af1318-de2a-83ac-b7f0-e8c21d1cfae6
 12 178d61be-d386-642e-aaa9-327f3ffbb5f5
 13 8e433f17-b413-35b3-9800-a4088cb99e5c
 14 6cab24b3-8345-454b-8019-d7335571ce96
 15 2b73c719-3726-0c42-94d4-c54c24590761
 16 ce72b193-cfe8-1e31-abb6-40f15bb04e6d
 17 ebaec8cc-e650-62cf-8045-809de7b68aa3
 18 9aa08d6a-5583-229d-ac86-b4ec890283e3
 19 efab1533-d3d3-1eeb-a835-f38340ba400f
 20 1dd363ac-9fb1-0ac8-a694-3a80e55d5bc8
 21 f8bc7196-3ecd-0f9a-b505-7efb63a23536
 22 60e33671-6aa5-566b-8e16-c188da12760a
 23 552113f5-d932-4ee1-9d9b-e2b1df04b29f
 24 f24f477e-d795-72ef-beb4-85798529bb7f
 25 f3d63123-7836-1978-b62d-4ccf45743ff1
 26 eb090cab-6843-5335-827e-4743daf10178
 27 e90e2f2b-dea4-5597-b111-b1bf6a05030b
 28 3a4600be-7278-7a3e-a554-d35fbbc19e6b
 29 8635671e-e4cc-3259-a143-1e502ec8a876
 30 462ae907-04a6-6526-ab10-a9f0af81aa73
 31 eda36a9c-7584-31dc-8aa3-7c45f39f3ebd
 32 0e2ee56f-8c47-7a87-9e62-c85813b677e8
 33 34bdee65-8656-3ed3-a638-63d1e457c28e
 34 91467e69-ce00-5c53-928c-f6d9de2e5f99
 35 847a431d-ea27-3387-9c42-057b1f30945a
 36 ce706f06-56b3-09de-9374-4a3e22f0f5c9
 37 44c88ab2-c641-3b0f-b65d-092547f2c225
 38 517c5470-1a69-52f3-b4f0-cd9f8350433d
 39 0e0d3244-dbb0-71f0-a590-6053c18e2bea
 40 4717592f-815f-1cbc-8832-726166f818e4

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6837113522863401621005471557363735303571. Exactly this sequence comes out of new Random(423).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 69 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs