A858DE45F56D9BC9 archive

201305011405 1dgu2r

explained decrypted filler

seed 296

Metadata

Post ID
1dgu2r
Title
201305011405 → 2013-05-01 14:05 on A858's clock
Posted (UTC)
2013-05-01 06:05:35
Timezone
UTC+8 · title 14:05 against posted 06:05 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
32
Filler GUID seed
new Random(296).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
119 · predicted N = 32 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 4864aca4-4d39-34b6-8693-610fc843d98a
  2 48e92c5a-51a4-624e-818c-05abce0ebf53
  3 e14be98e-0cca-68a7-93f9-0c5c4b75f6c7
  4 bad113b7-3487-6f92-8887-ca417db76b7a
  5 5924e01c-aff8-7cbf-a09c-25477ae5447a
  6 77b3b98c-84c2-280a-b8cd-181147867f75
  7 c7331a74-d5e8-423b-a1f7-a2caeb753ac7
  8 ada4f6b6-5315-8d7c-9621-58a96bf7e2ae
  9 f0943a8e-6ff0-5d63-a8f8-007f6f0dd280
 10 7ad81022-8914-3002-b61c-dcb4f6857857
 11 2f638a18-08f9-3847-b49d-322109e00ae2
 12 b1db8d2a-62e9-5720-89c4-35d4fa600b3e
 13 8c323ffd-9bce-10b7-8d91-1fb8b05530f8
 14 2f264bfc-f1e6-4587-a18d-149bdb157f28
 15 4e7091d8-097b-1853-98d7-8c2bd8c07add
 16 5340c92a-6752-7c27-91c0-262c351ba084
 17 a0843ccc-4de2-206c-9f6b-165181fab345
 18 48f5d53a-6e2a-4a14-ab2f-6a57248cb7ec
 19 cb97671a-d43d-6918-bf77-1d5b1d4d04d7
 20 ec91d4f6-dfa4-8c2c-90e4-8523db98f6f2
 21 fc12e566-8416-1e51-b0df-3c00b747fce6
 22 b3566225-442d-4338-922e-22acbffc1bf4
 23 9c544565-7724-0552-8cde-e0d19c61ce19
 24 e443d363-f800-3f5f-9788-e1f3e7eba02c
 25 3e30d6b6-7b84-677c-a07f-fea55e27f324
 26 5fd617f9-c838-8c24-b7ad-8bd0f966155a
 27 ee772fea-948b-31b0-a82b-6269c9f8a7c5
 28 495ccc34-72d2-06b4-a84c-1253cb51f786
 29 b548692f-daff-276e-a178-5ca9002a0f31
 30 e361c81a-e5a1-4213-8109-9cf2694a2e65
 31 420c6cb0-dee7-4b43-ae4c-9c12da55a054
 32 6f81f62e-7e71-3502-92e1-336480e6741e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 36667248533514172468140368302443. Exactly this sequence comes out of new Random(296).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 119 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs