A858DE45F56D9BC9 archive

201304180726 1clljz

explained decrypted filler

seed 246

Metadata

Post ID
1clljz
Title
201304180726 → 2013-04-18 07:26 on A858's clock
Posted (UTC)
2013-04-18 11:26:51
Timezone
UTC−4 · title 07:26 against posted 11:26 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304180726) = 2bd050bfa3256a3b61749b896460cc65 (name+title)
GUIDs
40
Filler GUID seed
new Random(246).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
40 · predicted N = 40 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
11 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304180726 (name+title). Key = MD5(password) = 2bd050bfa3256a3b61749b896460cc65, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 dc8bd405-8754-2b6e-8ff4-74441e9bf278
  2 1a3ba8e0-81bb-86e8-bd1a-e48c3101bb65
  3 0aeec2ec-5932-6f57-9eb1-43a77028e933
  4 e0d24f9c-7d4e-055e-bc9e-2a65232ca114
  5 a52d401b-ef46-25fd-84eb-560605734ac7
  6 1b960319-1c08-441e-b275-c30cc611c6e3
  7 c8b79e11-803a-1280-b32a-71bdd7037458
  8 64cbb7cd-893e-76b2-b5b0-aac89d7f997f
  9 f39c8849-750e-3383-9119-8cedae502277
 10 3feea99c-4235-84e0-96e8-32dd64178aac
 11 279a77cf-5af6-44cf-8d41-9bc0d0db2e86
 12 e0a2119d-b544-4155-bd72-ed77aebe5e9c
 13 48ddd215-4edc-6fbe-aa00-be6050016e4d
 14 a98dbe95-b2c2-4d27-964f-e9cec49c0e0d
 15 5fa6d512-5ef7-1015-8c3f-ad0fff90ab2d
 16 6d29c07f-68bc-5616-a172-471f6c3ce7c8
 17 1eb8d500-2df1-2972-8274-83eed56ea758
 18 978680b0-1325-4dc3-bba3-3644c1a3f8c6
 19 d840df18-ec86-3b85-bdae-4371d0fcf2e6
 20 d1902bd2-9f8c-5952-9cf3-1d6ab0ab7e5e
 21 cc4e8767-6b39-4bda-9cd8-16ccfd1357cd
 22 5d81f51d-ba5f-1524-81ca-00bab2740195
 23 e0660cb4-5d5b-5dbb-b371-a05e03e3affd
 24 903b16ee-444a-8b15-b9ed-8bc35f71bb9d
 25 cc901593-e6d8-7dd0-bd5c-5f2f50030e18
 26 309b64c7-4658-639c-9266-d6488ba96eec
 27 a7d91f90-d426-3361-a89f-c457eeb0d3ae
 28 d6ef6f10-8fc6-1852-a7ab-65657420da2c
 29 af3c9cce-c85f-4338-88db-bdf5a568bd1c
 30 eba4e61c-90e0-162a-8183-a789817edd8c
 31 28e0a80f-71e9-0f60-8208-0956bd86610a
 32 05055c51-281b-2c44-8c72-96bfbb6cd2fc
 33 4da4b0bc-fbfd-1aea-a0e6-6da1dece6eab
 34 1e6ad1b2-6a30-1e83-ac98-d13470a9ea38
 35 4491da16-09d7-4ef3-9c5a-c3e1f8a78ffc
 36 13a33afe-e334-3b4c-83f8-b39e8ae3172d
 37 d2d73034-1d5f-7ec3-8e16-416c0267f91c
 38 22c535aa-7648-0a7f-9078-c39d8aebedc9
 39 da33af53-6d2f-4cf7-89dc-02eb1019014e
 40 80161d2e-227d-594b-884b-96ff307e68a1

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2860241738446415243541587631410211437045. Exactly this sequence comes out of new Random(246).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 40 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs