A858DE45F56D9BC9 archive

201303301614 1bahep

explained decrypted filler

seed 933

Metadata

Post ID
1bahep
Title
201303301614 → 2013-03-30 16:14 on A858's clock
Posted (UTC)
2013-03-30 06:14:58
Timezone
UTC+10 · title 16:14 against posted 06:14 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303301614) = 40994a47a476adab2bd1a31dbea5fd7b (name+title)
GUIDs
32
Filler GUID seed
new Random(933).Next(9) ✓ verified
Run
Run 43 (seed 120,022,078) (seed)
Draw
85 · predicted N = 32 ✓
Machine boot
2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
8 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303301614 (name+title). Key = MD5(password) = 40994a47a476adab2bd1a31dbea5fd7b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 8f76d3f2-9111-1bcf-9c8d-7d859125f1eb
  2 7272594b-0a94-55cb-81d4-de019244ef13
  3 9340e717-acb5-82be-ab1d-022d7ea44afb
  4 994434be-8c35-67af-bab7-b05117bf086a
  5 c455f4fa-d20d-3187-850e-f75daffdd4c9
  6 82bd4b10-e0ce-828f-8048-ff9ae6348056
  7 6e51cfe6-8d44-8916-8f16-0cf35a678e5e
  8 1ad2f24b-807b-4084-adf4-e91de7b61ae2
  9 5228ca65-ce3e-3056-b6e0-d4d1dc93afeb
 10 003000b6-d0f8-2790-b7d0-fb90810f3db4
 11 ef7fc322-bf9c-5c16-9f0a-86dcf6b12fbb
 12 11fec0c6-c186-7a85-90a6-8816cd0b23cb
 13 c020db93-aa73-0ece-9887-9af69e7d3b24
 14 1d204a51-915b-7906-be41-a109f0ec26ec
 15 809de1b0-1b55-0d3d-8145-7e8b709c4262
 16 5a6a59b5-88fc-6f7d-b597-c255522742cd
 17 2aa603b7-6ba0-095d-ba2b-e48155d6fd4b
 18 6ab8b616-3217-4987-b9e1-3670e83aacfb
 19 7487690b-fe28-88ef-aa7d-392a0ea7036b
 20 780eaa34-40a5-527c-8523-c1ab8fc60690
 21 3f3e95b8-dcb1-7581-b7eb-0baf52f16dcf
 22 e66feb36-148f-645a-bdb6-2b92f085c6ae
 23 88ae2f7d-00d0-682e-bfaf-e5b7f0a48ca0
 24 ebb9ec02-c8f6-877b-bac1-4195c134660c
 25 73232269-17d7-186c-a0a1-4b673da5b741
 26 e8afec5e-379d-5118-a087-cc0ed8b39e6a
 27 bfc8fde3-c313-07c5-8a01-bc052c3f5609
 28 2d034313-753d-77c2-8970-7bf97be80f01
 29 e5fcce31-2a42-2364-9245-ca35306ea43f
 30 786c24a0-b444-4066-96f5-296a5058ccb4
 31 21aefeb4-d73b-5457-b9ee-fa6203f2af16
 32 2db3105b-7179-1306-9de4-e5f7a16ea6c4

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 15863884325707060485766815072451. Exactly this sequence comes out of new Random(933).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 85 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs