A858DE45F56D9BC9 archive

201304161636 1chgna

explained decrypted filler

seed 424

Metadata

Post ID
1chgna
Title
201304161636 → 2013-04-16 16:36 on A858's clock
Posted (UTC)
2013-04-16 20:36:53
Timezone
UTC−4 · title 16:36 against posted 20:36 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304161636) = 4e351d5ac1de5002d932db3a862821d8 (name+title)
GUIDs
32
Filler GUID seed
new Random(424).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
30 · predicted N = 32 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304161636 (name+title). Key = MD5(password) = 4e351d5ac1de5002d932db3a862821d8, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 219488ff-a04c-28b9-9908-34abd32fb12e
  2 0908222f-e839-2de5-a64a-e97292ca1d50
  3 0475777f-6f2b-1106-80fd-cd5b98e77216
  4 1790804f-8a76-0cff-b8c9-7fba882addff
  5 5abf4d7f-6f4d-5f8c-b8ad-7ec4bdc6e015
  6 e0068307-1397-08ef-9830-f7305499e26a
  7 f7e2cdc7-fb43-7f8f-8a75-8563ac0a7ae2
  8 f4eef6d3-93aa-1907-a9b3-1af97d7c068b
  9 8a8ca75d-981c-371c-8055-fb200d0787b4
 10 56990eef-3d03-54f4-acd0-7a3ebd95c7d0
 11 05309fee-c5ab-5d48-9453-5a78a02bf0f4
 12 35ed3086-9006-407e-8ff3-ff5eef0aea5d
 13 64b0e924-f6b2-148e-9293-e33f3388cf03
 14 56fcdae9-5028-03be-9e86-58d1949c221e
 15 2ebd9dbc-dbce-6306-b8e9-1ebc1d1dd19c
 16 360c890a-6781-7c1a-b4f0-e9eb6a93dc55
 17 9a1c0e59-0fc2-0cc1-a64a-d6c6b3ade4ec
 18 e793ef37-73d0-7ec6-a709-e176deb2f5c8
 19 120c0b73-36ed-1d8b-b4db-f82e13628d1a
 20 eec03a3a-2e55-47d8-942b-256e1d91b875
 21 909a56c7-c17d-13f6-a994-4387f9f06849
 22 968a894d-ef0f-7d58-a55d-df6941b70e4b
 23 1f628c96-bf87-5320-af52-33b80fadee34
 24 346e1780-ade6-1102-a964-9184a513c318
 25 b21bf1f1-9348-23b6-ae34-f92249059da4
 26 7e798770-b48e-2372-bb07-f91aee3ee136
 27 9b49e327-99d5-492b-894a-afb2f446d1f7
 28 a0a8ba01-e33a-3f02-831c-1501e1de4dbd
 29 59a68233-94f1-5af1-9315-f02769857cc8
 30 cb4b0e0b-d028-4a9f-9a21-44a45e6d14e8
 31 d3bec0ea-c34c-67f0-b10e-5db5a9001962
 32 7dbc3f20-4e4a-13ee-bea6-740146484218

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 22105071355410670714175122435461. Exactly this sequence comes out of new Random(424).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 30 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs