A858DE45F56D9BC9 archive

201303311034 1bbybj

explained decrypted filler

seed 352

Metadata

Post ID
1bbybj
Title
201303311034 → 2013-03-31 10:34 on A858's clock
Posted (UTC)
2013-03-31 00:34:57
Timezone
UTC+10 · title 10:34 against posted 00:34 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303311034) = c5b7afa825a2f0603c233d442e9655c5 (name+title)
GUIDs
32
Filler GUID seed
new Random(352).Next(9) ✓ verified
Run
Run 43 (seed 120,022,078) (seed)
Draw
105 · predicted N = 32 ✓
Machine boot
2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
10 · 9
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303311034 (name+title). Key = MD5(password) = c5b7afa825a2f0603c233d442e9655c5, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 dc0fcc91-a043-562e-9c03-7143980c37db
  2 624eeb59-84e8-0773-a36f-4066799ba4f8
  3 38daa324-6d68-755c-aed6-34c1b9df3195
  4 7553e53f-794b-66a7-9eae-23e302bfe042
  5 012ce812-3d4d-15e5-b682-4a171990813e
  6 e4a4fac8-df72-1906-870b-1b3dfdc49d67
  7 d3fc69b3-e0f1-557d-ba73-a5c5e1f36201
  8 7ab32d1b-c20f-0355-b2bd-a237af3a210d
  9 d56e792b-f6b3-44b0-b249-a4257f629832
 10 d1337117-b8e2-0fcf-9202-63631a613fce
 11 1f034cd4-0e6e-5041-8f59-a2e6bb8cdb9a
 12 24570c4c-c962-24cd-b698-ca34ddc6f6b9
 13 175756f6-09c7-5f1a-a914-856395c73bff
 14 2b423596-6a71-563b-b01b-b754ceb6301a
 15 54a32fe3-b9b8-3def-a13d-9aa03e3068cc
 16 7da77456-b6ca-7a25-8e2c-39548ef1a24b
 17 035a5d8b-a43c-737c-8785-6071c48bb65f
 18 4bf6e17c-cbfc-2cb0-9ca3-59ff9f2c94a0
 19 2ce903f4-fb77-10a9-86d3-2680cdd61d96
 20 08d50b84-66fc-5126-8cc6-2fdf593b7b9f
 21 cbc90a91-c1a6-57f5-86e0-6d2e7e1f7ce7
 22 fccde18f-8324-1053-a99b-8800097609dc
 23 628ce5d0-701e-498a-9389-bba92bd11298
 24 9b9c6824-72ee-0f29-9951-db6359717ea0
 25 916cdaa9-a1fe-1398-ac19-733c6ca20c35
 26 527aa96d-5fc6-8db9-a275-fa75f9b4a0ed
 27 3b2142dd-a310-5ac2-85ae-b70ca0a8cd94
 28 ecbc318b-7a16-7d47-8f50-78821bc1a348
 29 305e9f02-5b3a-660f-9e72-a6d5d6460c17
 30 22851f3f-c2d1-50b4-b516-06a937d10004
 31 3bf7ec82-b40c-1b07-a3e3-0fbd7cef3590
 32 d7bac316-8976-1f83-81ce-9afb8a688c1a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 50761150405255377215514018576511. Exactly this sequence comes out of new Random(352).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 105 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs