A858DE45F56D9BC9 archive

201304051913 1bq22y

explained decrypted filler

seed 68

Metadata

Post ID
1bq22y
Title
201304051913 → 2013-04-05 19:13 on A858's clock
Posted (UTC)
2013-04-05 09:13:57
Timezone
UTC+10 · title 19:13 against posted 09:13 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304051913) = cacfd7c443f9a271e904364417b77c78 (name+title)
GUIDs
32
Filler GUID seed
new Random(68).Next(9) ✓ verified
Run
Run 44 (seed 1,087,967,875) (seed)
Draw
80 · predicted N = 32 ✓
Machine boot
2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304051913 (name+title). Key = MD5(password) = cacfd7c443f9a271e904364417b77c78, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 46fef6e7-0377-2abb-9ee4-7395de93d8cb
  2 1bd4450c-347b-61d2-9f9d-ebd7123ce532
  3 2e319a7b-27ee-2b2a-b557-acab9600bb3b
  4 bd01c2e1-e966-0ff6-b713-16930c6dbabd
  5 aca555ec-7317-8ea3-9af6-950e164dedbe
  6 7cd77dcf-6f95-87a9-ac5a-7e9d5a962ad7
  7 c8f71368-47fd-3f5c-a742-5eaca4b86b8c
  8 879edc29-4c2e-5ce2-9f94-58a09fee5e7f
  9 e6779d1b-18ca-3021-b262-a8d5ee0184df
 10 33a1fb9e-4140-3edc-9d17-02b7ce13b57d
 11 e23fe2dc-63e5-34b9-811f-773534f6aaf5
 12 bd880203-3bc3-580a-8947-7ee2cefa63ff
 13 96fbec63-2a3e-3d30-a83f-c5b4bc7749fd
 14 592a2737-c368-709f-a350-f0108faaf512
 15 cbd80668-7546-505d-8175-2a8e344e1f4a
 16 c11cd567-51d7-4f8f-9d92-73c02765c73a
 17 79a89fc5-3b90-423d-abf6-dda36c01fb62
 18 83c0d4b2-aad0-1da0-a9ba-ad37a434f2cf
 19 071bf2a1-9430-41f8-9024-cc743d70a314
 20 9429be14-7f31-5bac-8ae7-71f1c3214d2c
 21 ecdc601c-33ba-7c13-ae7a-0d800aadd6e2
 22 42cd4b5a-4a68-4d0c-9fb4-c05339f9c2a3
 23 d22236a9-22bd-46c9-8e33-aba844cbb610
 24 45c31415-f1d9-7725-8efc-5457cb29b3ab
 25 f5ae6158-8edf-3932-99bb-4d4025dc875c
 26 55ad3a06-651c-2864-a08f-e203d6056a57
 27 3fd4763b-d865-3f17-83d2-6e854078ad3e
 28 5ebc57ce-7edb-7a55-a1d3-64a578cabce1
 29 ffb53a45-db6d-25c4-a331-fdf8c7906bc6
 30 170fdc54-49a0-7336-9bec-3aa17f285384
 31 500bba05-9a47-26bd-abd8-e829b9744b33
 32 fc147a93-a71a-32a8-9c6d-bc188bcca224

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 26208835333537544145744732372723. Exactly this sequence comes out of new Random(68).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 80 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs