A858DE45F56D9BC9 archive

201304042113 1bnjvv

explained decrypted filler

3DES(name+title) ECB, 32 GUIDs, seed 244

Metadata

Post ID
1bnjvv
Title
201304042113 → 2013-04-04 21:13 on A858's clock
Posted (UTC)
2013-04-04 11:13:58
Timezone
UTC+10 · title 21:13 against posted 11:13 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304042113) = 40630bbbd870ee59b7e0e77f93615e3c (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
32
Filler GUID seed
new Random(244).Next(9) ✓ verified
Run
Run 44 (seed 1,087,967,875) (seed)
Draw
50 · predicted N = 32 ✓
Machine boot
2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304042113 (name+title). Key = MD5(password) = 40630bbbd870ee59b7e0e77f93615e3c, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 fe9d13cc-da34-1f88-b2bd-4d3aaee0a2ae
  2 b984ee7c-a494-3f53-9b4a-690ecc4809b5
  3 9c151cef-49a3-2b35-9145-2cb2a77ddd57
  4 686f3cff-cc74-5708-813d-14127ef362ba
  5 f65d476b-3194-3688-ba7c-a94f9322ff8c
  6 3d24e320-cb37-7404-a365-601093b7dc20
  7 5d84e51d-9e7e-2cba-a9ce-a8de38ff9f29
  8 30d9f4e8-68a4-7aa7-8037-9512821d8279
  9 54b6ac02-835b-186e-907b-dacd43c34970
 10 dcae4249-5e55-27dd-9511-4a4adf306840
 11 63adb57b-e2fd-0056-bf16-7aa02e82a68c
 12 985a87be-1f72-8ec2-8193-b8cba51610ef
 13 b5fb578e-a8d2-31eb-8799-cf3743c525f5
 14 5c0341e5-9ed5-3b16-8ea4-cca991b81d11
 15 8267394a-ef4d-62f9-9ba7-b39c4eeab1cc
 16 4e3d06db-7e7e-3692-b556-f38dcafe1aad
 17 10814f67-41a7-351d-9367-f645709c2c84
 18 3265580f-0f8c-22fe-aef5-8da597c3ba97
 19 4558af3e-25cf-23d2-ac95-ca0a977edf29
 20 68a5a890-345c-7326-acfb-fc3b85be17bc
 21 636c4623-9658-242a-9df7-ace1723d9f69
 22 3e710668-d22e-6af9-8a17-2478b5a1ed3c
 23 92b9743b-25d9-241e-96b6-fe7d3ab42ef7
 24 6edfabad-f3b4-2ff3-9195-8631c4912eac
 25 f4621d4d-9829-5aa1-a053-75165074cf23
 26 0fab09ae-1339-4aef-abe2-00fbc361e9cd
 27 6585d1b6-9a05-6ff6-8f79-4888bcae8a56
 28 5f04d1c8-c190-7aef-a1e4-7aa0c8fd8237
 29 7d94bc86-8333-8698-a5db-5898ee45fd58
 30 28f92f78-5507-559f-aa3b-94727383b9ae
 31 98691641-35fd-2a56-a328-af6e147d2deb
 32 7927717f-0551-6e84-ad83-3466f7f09258

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 13253727120833633227262254678526. Exactly this sequence comes out of new Random(244).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 50 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results