A858DE45F56D9BC9 archive

201304120352 1c70v6

explained decrypted filler

seed 683

Metadata

Post ID
1c70v6
Title
201304120352 → 2013-04-12 03:52 on A858's clock
Posted (UTC)
2013-04-12 07:53:00
Timezone
UTC−4 · title 03:52 against posted 07:53 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304120352) = 1d0a2eee15cd4b4034847137eb6f8bf3 (name+title)
GUIDs
40
Filler GUID seed
new Random(683).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
2 · predicted N = 40 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 2
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304120352 (name+title). Key = MD5(password) = 1d0a2eee15cd4b4034847137eb6f8bf3, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 098cfb20-0efe-4440-a6df-9ee20fd994eb
  2 a64c3fe2-71a5-282a-84c0-31be730e8848
  3 0fdf3027-6284-1257-955d-aa55ed6d323c
  4 f251dc5e-262a-38dc-8b89-0b5a3beee182
  5 19ee45c4-baef-5a81-816c-e3e7d2c6164d
  6 70a69d9e-d5a3-3db3-9cc8-6bb7f82d4786
  7 de819af1-a99c-8c94-8a0a-e11af08be44e
  8 bc9a3d36-ae95-0056-8a62-a7574457eb55
  9 f3044dec-9f0c-438f-a26c-c87f4d5c84eb
 10 3ec440b4-2f74-1db0-8edc-5e60635d9ddf
 11 19e5a41a-8741-40fc-84b2-7e8375515ea2
 12 d2c84782-957e-653d-9c03-1f55829b1ae4
 13 0bcd83ef-8bb6-1761-a728-75c73f9186d0
 14 ab02ff80-4a30-7162-b081-792ddf4108e7
 15 fe4891a0-6f89-0013-9b08-3b68a8e0e043
 16 801da731-a9e1-57d9-b6bc-a6699dd2ca24
 17 4fac9d4b-ddb6-8d01-a163-e58d1d9bde69
 18 ea3793f7-17f5-4887-af9c-ca5803860a00
 19 c74f8891-0b34-1dee-89d5-316036f21775
 20 0e904128-13e2-6ab4-b0e6-66ca8d6bafcd
 21 2cd2d672-6e3d-59a5-a31f-dba136eea61c
 22 698eb1e3-45b3-354a-b9b5-7910f18049b3
 23 6db535d9-8c21-3ef3-af9c-088c4772b405
 24 5a8b8d7e-ec14-578a-8607-75705c35e19d
 25 fde5605f-72a5-53ed-b253-7e77a1da70c6
 26 ccbcd087-ad2f-7aea-a63b-d7c834ed7624
 27 b2db6ec8-f2ff-1e1f-9f8d-53cfb2ac3a6a
 28 5d664018-e339-7c18-9c67-b030970a9ed4
 29 0f69a710-b914-1144-b23a-0fb7561671ea
 30 cb2b198a-602d-1d7c-b3e9-a32538bd1e26
 31 3b4264ef-67f3-30a8-862b-dfc68a232d9c
 32 c53b53dd-fdb7-3bab-8cb6-3f4d9a51846a
 33 7d97a6c9-4876-83a4-9a4b-c0f197e6f61e
 34 1458d3a6-cdff-149b-986d-c4ad4f1eb5d7
 35 27ee665d-8df6-166b-9418-0195498ef793
 36 2ecbd614-9197-30a3-b970-70456c0c220b
 37 7060843f-3417-79f9-acfa-fde3d3d02f9f
 38 af6f958a-d465-78fb-b436-36cca572f769
 39 37c61e48-2a72-2d6e-b1e1-32488da36ce3
 40 07670dd9-1f53-6020-a2ea-ffd8592be5f4

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4213538041461705841653355717113381137726. Exactly this sequence comes out of new Random(683).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 2 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs