A858DE45F56D9BC9 archive

201304052337 1bqckb

explained decrypted filler

seed 832

Metadata

Post ID
1bqckb
Title
201304052337 → 2013-04-05 23:37 on A858's clock
Posted (UTC)
2013-04-05 13:37:57
Timezone
UTC+10 · title 23:37 against posted 13:37 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304052337) = 2b2605cbe3bafa8dcb7cc7dbe9d5cdca (name+title)
GUIDs
40
Filler GUID seed
new Random(832).Next(9) ✓ verified
Run
Run 44 (seed 1,087,967,875) (seed)
Draw
86 · predicted N = 40 ✓
Machine boot
2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304052337 (name+title). Key = MD5(password) = 2b2605cbe3bafa8dcb7cc7dbe9d5cdca, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5b0dde50-6c45-3e54-9120-e6dd51ba2352
  2 2dd23e90-ab09-85e8-8b66-ddf0960fe865
  3 73ad9cbd-4fc6-21b6-bc65-eec660a4deb9
  4 65df3389-c96a-153b-9983-3accfdde131e
  5 2b1d7457-a46a-7f37-8836-edae728ab5ba
  6 bfaaa82e-769c-5826-8ef8-0ba80455a607
  7 9c6a7555-c2b0-663b-a5a2-2539cfb4d2de
  8 597afdc0-d2d1-7b79-9662-625d1f84fb97
  9 d8f18eb0-9402-8420-95ad-e36ef544df7e
 10 e2053385-a6ec-0d4b-aa1f-fe590d52231b
 11 4b42e158-4e39-216e-baa4-9456681d5c4e
 12 1b0b25dd-e71d-08e4-a305-444edcbb5aff
 13 93381ec9-6592-5a46-90cf-eb87bd6bc777
 14 613b50c2-258f-26ba-b92a-fbc3658dab3c
 15 c0cee79e-0af5-33e7-b74c-a3321116f746
 16 3f25ba46-41e7-5f2a-80ea-92b4952197b8
 17 8839df87-0370-5313-b78f-a370a4720938
 18 741b3e10-e976-743b-ac57-19f39fbc43c6
 19 66347b06-7d12-1126-8b6e-e0b46201e683
 20 5eea6f5b-0449-4010-b01a-421c13cdc6b5
 21 c5e69b93-34f1-3eda-a618-0c5f4505d063
 22 8b28d15e-6740-863d-9f9c-381ad466891a
 23 db3187c3-9633-5a02-a490-bca6cc75c0ac
 24 a4712597-c77d-6234-945b-795d6734db14
 25 4ef89234-083c-2156-8851-ad96adb622fc
 26 a8111b0e-99b0-5994-8461-795441508028
 27 2b9454be-8f0c-2424-b1da-930a634a5551
 28 e3fde7a6-c592-158b-93c9-ab16fb1dce90
 29 cb15a730-7396-3436-b86a-1e15350c3600
 30 1eff433f-4a93-1166-9069-a0b1be413142
 31 e7ed5f1c-86a3-3573-b238-342901d362a3
 32 9c15bfff-24f0-59e5-9592-d44a61ef830d
 33 4e54c089-d98d-737d-89d5-7c177fd0527b
 34 8fb1017d-44b2-7c7a-aef1-b52c2fe620e6
 35 47097925-9899-11a0-946e-660c2e382dda
 36 093e8cfe-c4f8-77ae-9030-327558e26290
 37 976598fb-a012-19bc-8f78-4563bcc616f1
 38 b55c074e-6f0a-30ce-a4ba-aad96d668abf
 39 a09334e7-37d7-794e-b689-df43c23c91fb
 40 fd949b5c-a673-339c-9fc7-fd241f3fe494

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3821756780205235571438562521313577171373. Exactly this sequence comes out of new Random(832).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 86 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs