A858DE45F56D9BC9 archive

201304181905 1cn293

explained decrypted filler

seed 666

Metadata

Post ID
1cn293
Title
201304181905 → 2013-04-18 19:05 on A858's clock
Posted (UTC)
2013-04-18 23:05:51
Timezone
UTC−4 · title 19:05 against posted 23:05 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304181905) = 6904ec5456aca19c4ce684197d73a021 (name+title)
GUIDs
40
Filler GUID seed
new Random(666).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
43 · predicted N = 40 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304181905 (name+title). Key = MD5(password) = 6904ec5456aca19c4ce684197d73a021, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d97eb6fc-7cc5-5fec-add3-05337f26fc7a
  2 b4639eba-bd25-280a-bcc9-5f58b4b1c2aa
  3 992b743c-6e99-2ac1-8c70-22d33414bff2
  4 fb5eb3d0-de8b-6c12-882d-01029327d0c7
  5 19ba7708-60a8-8f59-8716-8b6c80c7d693
  6 8c48df00-4d2e-555b-a8d1-13266d0f214b
  7 4877377a-8bac-260d-a846-275d64c14308
  8 8e2f61b7-1a57-57fb-8155-98730165bb46
  9 c930c730-ead1-3468-ad2d-e0e6dafa2bbf
 10 c6995d6f-0b5a-78a5-bbfd-0da75052519c
 11 dc591eb5-eeb8-8ec7-bc3d-e5ca251c7cb9
 12 a5b5c6d3-07c3-3b04-8319-ac0b49f2c16e
 13 4fa39e03-650b-4d23-874c-f46d2c7477c6
 14 86155aad-8eeb-81c6-b0b2-0c189d7e599e
 15 eee6e07c-d27c-1ecb-a7e6-764bc35b44d7
 16 6661f613-3d73-8a70-a673-cd4511c423c7
 17 2d66b2a4-6e94-7a55-88cb-9f69dfd5e0a7
 18 2b99b22e-1951-84c8-90e7-97f0a9ec67da
 19 4963e5bc-bece-63a7-ada0-237001f0a1f3
 20 6c9c9ecd-f0f9-1a35-b038-854a5c3efaff
 21 8a657b4a-ceb7-2488-a83d-1140c718a124
 22 b55802ed-ddbb-2b36-b1a3-e7c9a929f064
 23 89540fb9-cd86-4524-a1e5-3a9c7e4844c1
 24 e0b484b4-09aa-60bf-9e41-69efb1f7f5b1
 25 748e7f51-812b-8fc7-84e9-5afc91bea843
 26 784cfdb1-8c0a-7bd5-a2ad-47295cb6b512
 27 e84b4d1c-dcbf-418d-b8b9-2f03a353c2a0
 28 d26863ef-ad21-31b8-b1e5-63500be2050d
 29 ba88e747-0b4a-48f9-9f7b-9a8a724d4bf4
 30 b9f035c9-3426-4d59-af40-b6978bb4b7df
 31 82d31a44-a1cd-0dcf-b54c-12852b42657c
 32 84f5ff4a-b622-7a2d-9dcb-aecff0dc745e
 33 2cbb9bc6-eb54-12d3-9bb7-3625233884c1
 34 4b894e7f-6a72-6aa5-92bd-3a4bb64343af
 35 4df81916-ee90-1293-a41d-01ebed7a9df5
 36 6ad9b6bd-8f0d-5341-abfb-0506a8489e5d
 37 ea7dc08d-343b-6d41-8aef-4515f6891a4a
 38 a527c9ac-3b89-20e5-bc3a-784abe3e1d95
 39 a8be0872-6ed1-31c5-a776-c6e0cade9fef
 40 b84ec57b-23e8-1c76-83cc-b2ab6968d81a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5226852537834818786122468743440716156231. Exactly this sequence comes out of new Random(666).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 43 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs