A858DE45F56D9BC9 archive

201304031849 1bksoz

explained decrypted filler

seed 556

Metadata

Post ID
1bksoz
Title
201304031849 → 2013-04-03 18:49 on A858's clock
Posted (UTC)
2013-04-03 08:49:59
Timezone
UTC+10 · title 18:49 against posted 08:49 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304031849) = d1667dc47cb3e2a4707e211dcf4d4744 (name+title)
GUIDs
40
Filler GUID seed
new Random(556).Next(9) ✓ verified
Run
Run 44 (seed 1,087,967,875) (seed)
Draw
14 · predicted N = 40 ✓
Machine boot
2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304031849 (name+title). Key = MD5(password) = d1667dc47cb3e2a4707e211dcf4d4744, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 effc5903-0c46-1a61-b9cb-1859c7208163
  2 4155e04a-43e4-8abf-bb73-3b7d33cfde15
  3 c01e73e5-9a7e-3a14-b511-adae8714f0c6
  4 a5b88b0b-8092-26a5-9e5c-59143b1a6120
  5 b7ecc37a-2a52-204a-9208-9f7ede41b91e
  6 3b40ce17-4bd7-4ba2-a6a9-3ab76ac179d9
  7 9916ce61-c441-0c6e-b76d-5b331272970d
  8 1b591bef-3198-39e1-be18-8bca1e25ff89
  9 f71e5296-ca97-604e-be02-9184a68db468
 10 e0ba1318-13c3-2a9e-b4d0-b1212ad7b9c0
 11 2d24b718-13a6-8d01-bece-a3d19e20bead
 12 d5fd3292-8e78-4006-b4fa-61979d7fa49e
 13 0cf4b298-92ad-769f-9ce6-c69fc666459e
 14 3d65de8b-a2b5-6db2-b444-c6e7ce9ff4ae
 15 2cf5c46c-6ce0-19b3-985c-a632049a792a
 16 70fe1fe2-e6f1-225e-b890-a26c83e6c9f1
 17 72cec4a6-5206-56ac-b6d1-71bcbb77097b
 18 9bb79634-d02c-68b5-a57c-fcb7cffb0efd
 19 f76ffda3-f542-6d01-800a-f30290dd0624
 20 935a87c8-f7a6-5ef0-a523-14a0db63a186
 21 cd20dda2-2dd0-619a-b4aa-23d41af34985
 22 57a1bcb2-8a51-2a8f-b599-a09c290513a3
 23 8c28b0ec-0cd7-8a3f-ad99-b4c7b5d38a6f
 24 2de8d4f5-0849-2b60-a438-bf456ee4619e
 25 f31d2d7a-9904-1a34-bc27-423633b835b2
 26 534e592b-1db3-1c38-9551-d58fbf97b8af
 27 842ed323-d1b9-8ea8-8103-8d2f05e1cd67
 28 79a5e943-6f08-1ad5-be95-a02bbb082c66
 29 daf1dc08-13fd-1b2b-a118-81751fac678b
 30 a2af6a70-42e5-7ca7-8102-e341c7b3629e
 31 2121ce25-4175-46b1-9d4c-a69666434308
 32 f1928d8a-c2bc-8979-99c4-956f7f19e380
 33 743459ad-f96b-7eb7-b342-13a5506611c4
 34 8a33e1e5-d7dc-8eb7-ad61-21b7209e4c35
 35 1a4d409f-ef85-7450-88ec-8c3db5d9f1e8
 36 9a5ce448-b3a1-7d71-b5bb-b77d8cb9e245
 37 1a0e09e0-5a3d-5faa-8c6f-841e49e64a16
 38 18bf3128-80ae-2b9e-9742-85d91580f4ad
 39 39258fd4-8a26-5e9a-8f84-26713945999e
 40 6d1e4307-c284-51ef-91d7-d3c179f9811c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1832240362847612566562821181174878775255. Exactly this sequence comes out of new Random(556).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 14 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs