A858DE45F56D9BC9 archive

201304142153 1cd23j

explained decrypted filler

seed 753

Metadata

Post ID
1cd23j
Title
201304142153 → 2013-04-14 21:53 on A858's clock
Posted (UTC)
2013-04-15 01:53:56
Timezone
UTC−4 · title 21:53 against posted 01:53 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304142153) = 258c6845be3670efe8e79d31a78168b9 (name+title)
GUIDs
32
Filler GUID seed
new Random(753).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
19 · predicted N = 32 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304142153 (name+title). Key = MD5(password) = 258c6845be3670efe8e79d31a78168b9, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 63ccd1e0-8675-159b-8cb9-12f18a9155e0
  2 36dfeb2e-a1d7-61cd-8ec3-2d3fd7fa737a
  3 627f3df5-3399-0bd2-ac4e-d2f3dab46c10
  4 e971d690-f714-26c0-bc70-7f97289c4a54
  5 829433f3-2b5b-12b1-b966-bdb5045b497f
  6 c4544a93-1c94-5772-8148-8e9295f5d864
  7 14c899ee-4424-200d-b674-252ecfb23829
  8 fa96e7c1-d52e-1805-8546-03da433378db
  9 d7d47a90-8f92-1194-8276-8a1244b1b3e7
 10 3272fb3b-ce95-85ca-9be0-03c87adc28b7
 11 68989538-db51-05c4-92d3-2d4db929819f
 12 adbd6c5f-390a-3151-98a2-2719bb0fb51d
 13 4e46a76e-0396-22c1-9b75-0b5cf7bfd0af
 14 e25ee124-d764-1362-a8d2-07e9db08a28f
 15 e75ab0fb-ee0e-07ce-91d1-368d8543991f
 16 be72cfba-56bf-22ff-a30a-4a5c872d2151
 17 1252b653-99cb-3bec-954b-14913cedd92f
 18 74f2e79f-8edf-72be-b1f0-d9f0deba0d33
 19 96150787-0a14-024a-9d3e-61ddff1768db
 20 8fbe2197-a5ad-794f-a730-f0aed3646a85
 21 371f5b65-9b0a-7599-8af0-fe35f54d4599
 22 5e3f1f24-211f-5b22-8e3f-09ff7f9c82d5
 23 d385b797-3dbf-2696-8708-1037ee2c1729
 24 3c16499b-38f6-0c0e-90cc-cca81238d63c
 25 3a3bad1f-b93b-42d2-97c7-47bdf76d7194
 26 c7318069-575c-78cd-b954-2df8368f7928
 27 850844ba-742e-38b0-a40e-a57259f5f215
 28 8e9ef090-6c3a-2b10-9030-22c88153d16c
 29 0f80590d-b7f5-4e09-b953-80dab97b3ad6
 30 358eae05-aa1d-4436-ba2d-95efaf1631d6
 31 c71a271e-258a-1117-b403-a79d16a9f5a0
 32 3402508f-efee-78f7-bd56-f64a61f0749a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 16021521180321023707752047324417. Exactly this sequence comes out of new Random(753).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 19 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs