A858DE45F56D9BC9 archive

201303310219 1bb2oh

explained decrypted filler

seed 517

Metadata

Post ID
1bb2oh
Title
201303310219 → 2013-03-31 02:19 on A858's clock
Posted (UTC)
2013-03-30 16:19:58
Timezone
UTC+10 · title 02:19 against posted 16:19 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303310219) = 4313908d742a1b06e4ca9a956a18eced (name+title)
GUIDs
40
Filler GUID seed
new Random(517).Next(9) ✓ verified
Run
Run 43 (seed 120,022,078) (seed)
Draw
96 · predicted N = 40 ✓
Machine boot
2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
8 · 3
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303310219 (name+title). Key = MD5(password) = 4313908d742a1b06e4ca9a956a18eced, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 df318ce2-59f6-78fe-81dc-c06220ec3e9a
  2 985cc1ac-f19b-4648-9475-5c3d34801c95
  3 4aca0b3d-f7c0-1cd0-8bec-9bd31eb2f891
  4 44a6e8ec-c8f4-8597-b48f-ded5bba57a26
  5 82b73a6b-901f-5be5-b62f-d1a723f5577a
  6 72ce17ca-abfe-3ce6-af84-2c303819c929
  7 c0069df0-abf4-49c2-8ff0-8d6d41f41d66
  8 e752c1d6-7794-74b0-976c-90808c7e253b
  9 ed60f9eb-f94b-889b-a6e3-89a969196c79
 10 5e9dea97-a4f4-8e64-9a88-8070a28e511c
 11 8f934957-4724-1116-a43a-b4e231395e94
 12 1b401b64-8fe2-0fa2-99b7-53c27318533a
 13 1bf92561-ab50-0edd-9cab-39fac6136782
 14 eacabe21-b0d1-343a-91c0-127898af153c
 15 31e58a52-f918-76af-a3ce-2a339533a1bd
 16 788e3e3c-53b2-8100-9eba-2e71061975e0
 17 14e63b25-01d6-18ad-bf10-baa356665645
 18 dbbefefe-c40d-4e92-b921-c96d8cd3d8d0
 19 8fdc0b70-2324-6c24-a4c3-96c0534fe963
 20 33a2d5f7-24f0-485f-855f-57316a6d9dcf
 21 52cab340-c778-4db1-b629-d1262d38f1a5
 22 b4ef50a2-0010-68c6-a074-53051d7f63c1
 23 03fc65d8-5882-3a9c-9cbd-8c092a68e0eb
 24 34689ee4-e1b6-5c32-ba70-abf8545a27ee
 25 51b5829f-788c-31f0-b4ed-6b37e39ec331
 26 cf31179f-a0fd-09fd-ab45-6bb45f9ae3b6
 27 92296052-884e-3c39-b721-5b5dd8e80133
 28 49a769d6-91d7-0acf-a561-63961b2569a7
 29 93c4824b-0da2-3843-9c4e-eafe599c5380
 30 e0a29a15-9155-4f16-8de9-44e03ee3aea9
 31 8785e590-a62a-0431-a821-0586ac696300
 32 4bacad21-0d5d-5196-9b83-3d2d3b238abe
 33 b4d61700-308d-1ffd-b8bd-13c9b132c616
 34 e2f7736d-2a73-8ea4-9f3c-b26bb00f091a
 35 4e1a164d-7018-198a-8c60-99db0232e355
 36 15fe71d8-0f01-1990-8126-8959cf60748e
 37 4a66eecb-3c9a-29c7-a91e-22717fde58df
 38 9ec358a6-82d1-6b0a-9e71-345dad028f7f
 39 825cef7c-8e72-7b12-adef-d99095c33f1b
 40 4c8d43a5-64c9-4428-94b7-78dfa3f4a687

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7418534788100378146446353030340518112674. Exactly this sequence comes out of new Random(517).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 96 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs