A858DE45F56D9BC9 archive

201304301850 1dejcq

explained decrypted filler

seed 215

Metadata

Post ID
1dejcq
Title
201304301850 → 2013-04-30 18:50 on A858's clock
Posted (UTC)
2013-04-30 10:50:36
Timezone
UTC+8 · title 18:50 against posted 10:50 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
40
Filler GUID seed
new Random(215).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
108 · predicted N = 40 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
9 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 8ad4912d-858b-05ca-86b4-7ff499a0dfc8
  2 d1b2287c-3e8d-8624-8089-82567828ec42
  3 777b8b66-735b-07d8-ad98-1f8fd23f67c6
  4 38b8b01a-8a06-48b3-97a9-f3f16fc2873c
  5 13feec32-f0da-246c-bd04-4ef1c9292179
  6 2e61bc94-4699-4d1c-aedc-bdd2f705e43b
  7 5bfb89a4-1cf5-2d56-a764-b01714fc8838
  8 eca06f71-73c4-23e3-9794-e0333886984e
  9 127af167-5f59-5a39-ac02-30876aa4d47b
 10 600e0926-5845-46f0-8c15-5130fcd370e7
 11 0973f079-cf65-651f-a081-c04eaa063d54
 12 6dcab631-e60e-23fc-b7a1-9cbfcc64f518
 13 4f2b14dc-913e-344e-aac8-0d5adbf8da1c
 14 60bef8ff-1490-2b4b-aeb3-6e7c6cb43680
 15 45b926bf-8f0d-452f-b8de-a675cd2d35f5
 16 ba686fb0-c10f-2eeb-98e1-c7afd85e252a
 17 f197b2b4-5cd0-23fc-b2e9-afd2c05cbe38
 18 51fc7b40-2842-2177-a95f-7572d9750e2a
 19 68d9ed2b-9038-46ef-a19e-7bab5685d6cd
 20 5039b928-54d7-5797-ae09-fb089277f922
 21 7026dfcd-1d54-35cd-95fc-d5eb7cd7bed1
 22 6cd3c5b1-a68b-5161-98b3-e6d1c761531b
 23 daa2846c-df76-2747-9470-8a80e11666c1
 24 d98c1964-f8af-17fd-aeaf-aa71995c37dd
 25 c95b09aa-0a89-6d7e-8851-2d6e409b1333
 26 d777a709-bd28-742d-9dd4-b144489262bd
 27 c0e4fa5f-9c13-756b-8f2a-d4ca1d3e7bfb
 28 5bdd6be1-fe89-8ede-b548-c6ae41b9bf43
 29 9c266910-8c14-8df8-bb4e-a6f92ecaf4ee
 30 da8e1e3a-bbf6-2f1a-8c6a-c33a4312b0d8
 31 fcbf9824-c0e1-500b-9d05-6c976c350553
 32 d29827c4-c24e-0f8f-837c-a2b8d227d00e
 33 f8d95a56-1ba7-608e-a4c1-73407f930a1f
 34 8ba69bf8-7bf6-3ed7-a392-36691ef2b0a2
 35 c04cd5fd-4e67-6d9c-8a9f-868164bbc55d
 36 a8584f41-e885-09b3-bd43-a5100bb40eaf
 37 d0253909-014b-1343-b635-9fdfb636ca5e
 38 727179a7-4775-84d6-83de-ed47dcbe8ba7
 39 4a25bfa3-a109-104f-b5bc-adaf4cd3acc8
 40 187bcc7e-fc49-008c-bf2f-31d4c942c690

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 0804242254623242224535216778825063601810. Exactly this sequence comes out of new Random(215).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 108 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs