A858DE45F56D9BC9 archive

201304042157 1bnltp

explained decrypted filler

seed 266

Metadata

Post ID
1bnltp
Title
201304042157 → 2013-04-04 21:57 on A858's clock
Posted (UTC)
2013-04-04 11:57:59
Timezone
UTC+10 · title 21:57 against posted 11:57 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304042157) = 42023679c7016e2e6e98115a4e12fc07 (name+title)
GUIDs
32
Filler GUID seed
new Random(266).Next(9) ✓ verified
Run
Run 44 (seed 1,087,967,875) (seed)
Draw
51 · predicted N = 32 ✓
Machine boot
2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
9 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304042157 (name+title). Key = MD5(password) = 42023679c7016e2e6e98115a4e12fc07, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 337a772e-fbad-6971-aba4-7139fc634d52
  2 bd3018e7-4eff-74be-90d5-979fee9d4800
  3 44e65e78-969d-65c9-b625-9fa9c20d4b52
  4 fc7a6442-3ae7-3fe2-897f-770284b115fd
  5 f8084870-13d4-2d06-be8f-3d391dcf4032
  6 29038f8c-e3cb-0fe1-9e3d-ad56cfced9f9
  7 0d5434ca-3519-0ca2-a199-1aedaea5886a
  8 979bc980-c243-8de8-ba65-fd75173a639b
  9 f1851554-f1d4-7b68-81a6-fe44e6f8bc95
 10 f1bdff72-097f-3560-bb1a-6708e63a2ad4
 11 3344589c-d554-2f1a-bef0-d8bc17940fc7
 12 348d2b5b-cc98-157d-ab80-79206a8faa48
 13 6d492d13-8320-4aa8-9ee0-9b846773c083
 14 f75dac3d-9f56-7cf9-b764-6fed111700f3
 15 4723c4c9-7d0a-181d-8ff6-0ceabf707849
 16 adff6f1c-a128-1320-a950-74d0397d7554
 17 40df381f-f75b-60bb-9fef-e680f959e82a
 18 1533c31e-aade-88ab-a32d-b8af24d7512d
 19 a28eaa24-f440-7b7b-8fb9-8b2f44b9376d
 20 c1a07ed0-4f5b-2d65-887c-52f2fb2152cc
 21 e6bdfc66-a274-146c-89aa-b5c66a43a23e
 22 84c6746b-1f09-05fa-b401-f928363cb729
 23 e6ab01fa-3d88-826f-af5f-095cb182e62f
 24 367ebd7d-2f2a-8b3b-beff-9a70c351171e
 25 553aca7c-1f20-6a16-95a8-d6db9a9b64c3
 26 4147391c-040f-5600-9cec-113cb12132c6
 27 724627b2-b4d2-5e65-af30-2f54dc8fc9f1
 28 4a30a464-d8a0-4b5a-bd5a-edcc7c9496c9
 29 4148b96a-25a6-0c54-858a-fa1e539a3669
 30 a99f489f-8fac-2b51-b5cc-e6fe301cd374
 31 1ec8d4bc-ff9c-3e1d-ad88-ac95c63d6161
 32 31f721d4-837e-420b-8868-16ac3bf44c80

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 67632008732147116872108865540234. Exactly this sequence comes out of new Random(266).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 51 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs