A858DE45F56D9BC9 archive

201304050053 1bnw2k

explained decrypted filler

seed 80

Metadata

Post ID
1bnw2k
Title
201304050053 → 2013-04-05 00:53 on A858's clock
Posted (UTC)
2013-04-04 14:53:58
Timezone
UTC+10 · title 00:53 against posted 14:53 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304050053) = 4978d92f0c1f8770ae3d890069f50acc (name+title)
GUIDs
40
Filler GUID seed
new Random(80).Next(9) ✓ verified
Run
Run 44 (seed 1,087,967,875) (seed)
Draw
55 · predicted N = 40 ✓
Machine boot
2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304050053 (name+title). Key = MD5(password) = 4978d92f0c1f8770ae3d890069f50acc, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 da7279b7-1bd0-4501-b7aa-3cc903c5e64c
  2 16977853-3a57-2705-9763-20702bf05223
  3 d6053a06-d2c5-69bf-9ba1-dd7cfe6c2ecd
  4 8e16aee1-1c31-5b3c-9ff0-e064e7e978e0
  5 8df36736-8045-2856-bfa8-31215a45d03c
  6 541dcb4c-b689-4195-b285-80e8d5561f86
  7 a9b93d3a-da81-651c-a396-fd7a5177ee8f
  8 509ce1a4-d837-5dcc-8a3d-3d2543bc503c
  9 1d1b77e6-ae02-7158-986b-c8a416314dbd
 10 dfce5f2a-078e-6972-82a9-ccb650b4c77e
 11 7c702359-ab7d-27e1-a9f2-6c4cd2aaf0dd
 12 6165c645-f310-8524-8be9-93e74ad961ff
 13 62ded264-ecd4-5318-bc30-f87edaa1c072
 14 8a484c99-8f61-0072-b331-210b9b802578
 15 d3ef25a6-ec1c-8001-9df6-663aa9525c9b
 16 aa861782-4c49-8936-a3d0-271701756ad8
 17 ef6788d0-2a3f-4794-8d00-a9f39a26848d
 18 463271bc-960e-5911-9cd1-4253fb2ea38e
 19 dd011f8c-12c9-79c1-98c6-e3eca6e191d9
 20 0fcb06a0-f5f8-2728-b95b-0028f49786e0
 21 9f2f9452-3e10-4136-bb87-023a1d842b15
 22 e0b74736-ddbb-49cd-990e-d6c53d461eb3
 23 3c8b075e-be09-4b6f-b62a-8776e5786b0d
 24 110b3d7e-4bae-8608-a746-2f5112d3c521
 25 6e8f5866-0cab-4aa7-914c-72f2ea5481d9
 26 5680e9cc-7881-84c7-b7ce-06dd28367cc0
 27 17635265-945d-6cfa-8229-d1384cd6b9a4
 28 95e82c67-50b1-2e34-88da-259ab1641ddc
 29 9e9b96f5-84a0-5484-8942-35a842a8131e
 30 83b13135-eaf8-4f6f-a8a0-17e2896fc938
 31 7e8963e4-ca20-63e6-b6a3-f0b3dec2aa67
 32 9cb44529-29c3-4e4c-a576-0c01d377d04c
 33 12915f8c-ea9a-47be-9136-bfe5f81e7f7d
 34 4ccd7bc3-1887-848b-964d-088fa8327e33
 35 0af79adf-c51c-569a-ab82-4b4937283f58
 36 3a107fd7-bcef-22f5-a70f-3ceaf3b2b5d1
 37 eee7b8a8-bac2-2a41-b585-5e3a249f0499
 38 45e2c2e7-ecef-8983-8355-63c48dd5d847
 39 6766055c-32cd-0b25-bb28-f7dba70b5979
 40 a521f74c-97ba-3469-a78e-1c31b9b79c16

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4265246576285088457244484862546448522803. Exactly this sequence comes out of new Random(80).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 55 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs