A858DE45F56D9BC9 archive

201303300514 1b9bp2

explained decrypted filler

seed 266

Metadata

Post ID
1b9bp2
Title
201303300514 → 2013-03-30 05:14 on A858's clock
Posted (UTC)
2013-03-29 19:14:58
Timezone
UTC+10 · title 05:14 against posted 19:14 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303300514) = 991a52bd458ee69cc8bfef9078130202 (name+title)
GUIDs
40
Filler GUID seed
new Random(266).Next(9) ✓ verified
Run
Run 43 (seed 120,022,078) (seed)
Draw
73 · predicted N = 40 ✓
Machine boot
2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303300514 (name+title). Key = MD5(password) = 991a52bd458ee69cc8bfef9078130202, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 56467853-220b-6962-9030-815873364e83
  2 e7566bc0-2fd3-7296-bd39-55def15d97d5
  3 057c4964-ad2b-67e0-9bdc-549544f4973d
  4 f438f3df-39b3-3287-9257-aa9231bae442
  5 67735446-e120-247f-b176-2373d2695fe3
  6 46d643c0-7e93-038d-947f-356c156c432d
  7 6d876ca8-b8ca-03ab-a789-904d0d415354
  8 4a1e8318-945f-8e63-9e64-21ea5f994e6b
  9 369a7e88-46fd-78ae-aef4-159d87fc24f8
 10 d105570b-fc1c-3ed4-9607-4e9204c6aa40
 11 73f3de3e-1988-25c0-9cf7-8786e7acf25a
 12 6fe63a41-6b8d-1103-beec-5c74a22c9eb6
 13 54674ee5-915d-4039-9feb-4d70c9b2bbbc
 14 998a4449-0f8a-71df-8950-44760fb4a056
 15 2e8f81df-2603-1473-a58d-6d9ce58fbd28
 16 24c1d5bb-ad4e-1cc4-8f90-8c9c8ce94fbd
 17 02adf6a9-6430-6550-bfa4-bd9b53a36206
 18 173f877b-9fd2-8439-9872-6220623d68dc
 19 cf1f70c1-50f1-7349-88db-021959a4f3a3
 20 adbae732-cdc1-22bc-b9dd-6b611a2116c0
 21 a31a0adb-4d3e-1af2-af5f-c7b46e5c7e52
 22 a3c95a00-fd1d-0e2b-8098-44d3d10a7180
 23 b38f35e7-7710-86f1-8cf4-ffff24a6da8a
 24 82d69ddd-a80d-8130-8fe9-786c6b45361f
 25 21c3ccdd-2175-6a1d-acb7-2be7652f8ced
 26 eafe9498-d399-527e-b233-51b147c27509
 27 315efad2-1973-5a7c-8cfe-8b419a780700
 28 22c77946-cf05-4356-b772-0831c36fe4d0
 29 0b29d3c5-055f-0f11-a5df-51555166f306
 30 67715104-8ea5-275d-a361-5422598ba9e7
 31 5fc63dae-ccab-3b59-abea-856ba840d473
 32 44d153de-b6e1-4186-b443-c7061fcd105e
 33 9346dd86-945a-275b-a500-921e5ab4d0b7
 34 9527a541-b712-5084-b3e9-56332763ffd5
 35 681917c8-5879-4564-a2fd-2afade6fc9c2
 36 ee9d3201-caea-2aae-8bd2-f82e1c71d27e
 37 2e1241ec-f9c5-3896-90e3-5a1e2786a397
 38 ce6d6efc-566f-5b87-b974-db2a40be85ae
 39 22cc47d1-a1d5-8501-abc4-5c583b1ecb43
 40 842d4240-0f17-8961-a2d3-80487a6db68c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6763200873214711687210886554023425423588. Exactly this sequence comes out of new Random(266).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 73 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs