A858DE45F56D9BC9 archive

201304050813 1box0g

explained decrypted filler

seed 684

Metadata

Post ID
1box0g
Title
201304050813 → 2013-04-05 08:13 on A858's clock
Posted (UTC)
2013-04-04 22:13:58
Timezone
UTC+10 · title 08:13 against posted 22:13 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304050813) = fd28d3fbe9e999d9df35ce8100343b3a (name+title)
GUIDs
40
Filler GUID seed
new Random(684).Next(9) ✓ verified
Run
Run 44 (seed 1,087,967,875) (seed)
Draw
65 · predicted N = 40 ✓
Machine boot
2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304050813 (name+title). Key = MD5(password) = fd28d3fbe9e999d9df35ce8100343b3a, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c3e17718-1a8e-04d5-a485-92fa36fc6b3a
  2 d8538533-2e5d-4222-ad93-5932fba5bcc5
  3 0c9c7447-36e7-7b68-82dd-87087c273ceb
  4 c27afda1-59da-496e-bb5e-2687c9f3e11c
  5 23afa375-2d1d-042d-b8dc-16d1bb9bb3f7
  6 e4b1c298-3e2c-2b82-b8db-f4fc4fd45cc7
  7 1cb6045c-9602-35f9-a8e5-d77873738783
  8 787aabf4-e4b4-5d20-9f22-eb8812493ef6
  9 dcf10a2c-97e5-59ff-8719-e9036f144470
 10 33f5b4ca-3b37-435a-8529-8c2c308c76d9
 11 653e3b53-e3db-132e-8b95-d2998a8eda61
 12 6d13a6b1-86cf-4c81-badd-f01d1e5e7434
 13 06559d67-5039-730b-ab8f-f2a2889f24c1
 14 68b5b330-9446-2754-868a-348359c128c8
 15 2ee43501-9040-6728-a720-cf71fcb4c461
 16 e4c97471-4b66-11a2-936d-4bb7f550610a
 17 234a6c4b-35f3-3a24-934e-9770069d005c
 18 dfa486b9-0680-0d2b-9034-a85d9f276eaf
 19 1f5e6634-57a7-1aa9-adf1-082f7c327316
 20 0e23343d-b1f3-1eeb-a00e-1c6d5f954f6e
 21 b22e47c4-94ad-6826-a4f2-be76f76a819f
 22 5f17008c-a1c1-5984-8072-ecf56cf567b7
 23 09dcc4ba-07e5-5d04-8d6c-07250892173f
 24 92b9a635-8259-80b0-adcf-9a406f92f8a4
 25 f86f14b4-ff05-6508-93f5-98b51e1362b0
 26 315f7f86-ac1c-4113-af22-49fb7a3040fc
 27 286cdfe9-653a-0d34-a653-00528ce0b9fe
 28 bfd2429f-c8d2-426e-a181-1d4fa1cdca4c
 29 3d72dd61-f676-4716-9cf2-fee6884da401
 30 d32eb9e4-2de3-8467-ae00-1bb101e132d7
 31 f5397964-7105-601d-bfc2-4f97ac7da13e
 32 fbca14f6-5ee7-5a00-b7a9-8c43df0ed414
 33 7c647670-1a41-3c01-bd40-563129735d98
 34 f640d132-3619-101c-82a4-26af8efe2d29
 35 80a2b483-3fb9-4958-a649-1715a11ae4e7
 36 602c3b08-6b0b-3779-b837-292a96f42a2f
 37 1aa2ec5c-9a63-57b7-b2f8-8ab78a492eea
 38 b37e2be4-3fff-4633-9541-e22bf196687e
 39 6c41d05d-c04a-44f3-a5d1-61541f3f9fae
 40 fabdc330-8458-3fc8-bd42-0aade461a5e4

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 0474023554147261301165586404486531435443. Exactly this sequence comes out of new Random(684).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 65 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs