A858DE45F56D9BC9 archive

201304232321 1czieb

explained decrypted filler

seed 659

Metadata

Post ID
1czieb
Title
201304232321 → 2013-04-23 23:21 on A858's clock
Posted (UTC)
2013-04-24 03:21:45
Timezone
UTC−4 · title 23:21 against posted 03:21 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304232321) = b91b6175a6607474633ff7f590f86b55 (name+title)
GUIDs
40
Filler GUID seed
new Random(659).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
75 · predicted N = 40 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304232321 (name+title). Key = MD5(password) = b91b6175a6607474633ff7f590f86b55, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 338c1c49-3b83-09a4-b18d-5ea116a6289e
  2 d396bd0b-84bf-1f86-9c68-722f5a1ff999
  3 fb7d9d71-4bf0-3ecb-9aff-c2b55718b1ce
  4 566e1deb-82bc-1c4f-b538-cba87156d713
  5 a7f3ff65-1484-6f33-a55a-4f6454fad34f
  6 1f5b61a0-b0f5-493e-b78e-6403d2e20f03
  7 958f1968-cc74-18a7-bbb6-b3aed31d9c82
  8 c7c45855-7264-06ae-9ddd-32d52f72490e
  9 c920b933-e33a-4a8c-8598-65bdf189e2ab
 10 8def3714-e883-2feb-b148-0a2ac9fef7d3
 11 ddde5653-a3b4-758e-85bc-f162f52d9d52
 12 30498f30-3f50-8f97-9cf0-c7531915a2b5
 13 3c242d8f-c4c1-5e16-aef8-2cc3afcf8df3
 14 855a9e8c-62c3-20c2-9429-2796bd8c710a
 15 e4d70262-384e-2989-96c8-3a93612a4d5d
 16 af438c79-c80e-5411-ad4a-bb151ff0fe16
 17 d5b68b1c-3d28-7127-898e-dd26651d8b7e
 18 a33c0b24-b459-5b88-8ffd-d810d5bcdb55
 19 723167d7-66dc-44df-96e3-5699e639d966
 20 d1e12bbb-0f04-49b7-a6b2-af0574f458ba
 21 867ccf26-db57-3a1c-85de-e9e772851d8b
 22 b98be7f7-63d3-42f3-8b21-2164dd1ea20b
 23 714e6e1e-8b15-31e8-aafb-ca3e38115a2a
 24 5cf6aa30-6cbd-213f-994c-9c8013c65083
 25 038a746d-3377-232d-9783-405fc0ad8030
 26 e9d03089-c232-3c50-8c83-40506eb0e182
 27 85552e26-b1bc-4cf4-a078-884f625c3a0b
 28 2ca2546d-c1f3-0030-ac5e-4ef012037892
 29 a6d95377-f3f3-56c4-8af3-2812f85ea862
 30 5a5c7840-5882-76ea-9949-d0143cea9df6
 31 d5bef09b-b90d-4188-9df7-b0669feb505e
 32 f88ce64d-204f-0d85-a958-9d2e1cf780ea
 33 618314fc-f8ed-22f9-b7da-164297fd4ca4
 34 a3d7debf-0971-40f8-92e8-a8ae1c8acfa8
 35 88fccd99-eeb9-65d1-9e14-62793f94f01d
 36 ec171ce5-cdbf-2fcf-9f70-4b8963c242fe
 37 d95f3396-ac69-8657-b0ea-024e140f7a0f
 38 bc674eec-0e4b-445b-99d7-1665aa89f75d
 39 d5eb94dc-b3c3-1748-9ee7-c250f0dd4e7c
 40 6fff4e93-59f4-1969-9615-1f3b9bcd38e5

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 0131641042785225754434322340574024628411. Exactly this sequence comes out of new Random(659).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 75 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs