A858DE45F56D9BC9 archive

201305011920 1dh467

explained decrypted filler

seed 12

Metadata

Post ID
1dh467
Title
201305011920 → 2013-05-01 19:20 on A858's clock
Posted (UTC)
2013-05-01 11:20:35
Timezone
UTC+8 · title 19:20 against posted 11:20 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
40
Filler GUID seed
new Random(12).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
122 · predicted N = 40 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 1c4d8c85-e501-8fa5-bfaa-5c7202b0b611
  2 cb924739-51e5-3c1f-821c-b0cb7ee06d1d
  3 2b77eb32-ecd9-1a9a-81f9-634f74113d05
  4 1c966231-666d-112c-b011-8c56134df5e4
  5 f981d1df-727e-5185-ab6b-6b356fc0caae
  6 15d94df1-b3dd-0ccb-aed9-16a44e5940dc
  7 6dfec704-ccb2-29b9-b5af-09e58fb268a9
  8 0379ddfc-82d8-434d-921c-2bb352d4ce1d
  9 6ed285e9-b73f-40ba-aeb7-084bf2b6090a
 10 771d25f4-cd0f-6542-b23a-7c3919b40b98
 11 243219ab-4930-1ab7-a6c6-606f31200e04
 12 4d7f7f12-c714-743e-8eab-e03c4b6ded44
 13 737ba08e-d609-7193-93d1-c355c78e6149
 14 0291d6ff-8bbb-645f-b0af-b2f10938d8de
 15 9795df77-b30e-30ba-bcbd-cf543aa70cf0
 16 e061c030-adba-4b7f-bded-665ea9358313
 17 c4ee0607-4325-8c0b-b541-3a307ece9aa5
 18 7d2d61a6-7f23-3add-bff8-82d653acfa94
 19 9f75099f-91d0-00f7-ae13-bbc0c1648672
 20 c432fcf1-2515-8bff-9593-7d3fc678c2b1
 21 4a5092b2-cd80-307d-81ca-ca427e5be697
 22 bfb81f2f-2c6f-74fc-b13d-f853aade8c79
 23 2c116647-eed8-0971-8acc-03f033d9f318
 24 b01e1044-f67f-2f6c-a7c5-746d16f30f8b
 25 1bcdcf5d-1da2-7525-b110-f4d38711175b
 26 38665f73-61ea-2a1f-8f10-3446f2bcc120
 27 61e167c6-7923-2229-8335-43a1a5624151
 28 f81b1dc0-036c-18d9-a63c-b3188eadafc5
 29 d2bf2ac7-7dde-7243-9f74-be6da81dcacc
 30 7a774448-e029-6fbb-86c2-dc1129caed96
 31 332f44a4-12b0-5039-8b0c-590c71a30b28
 32 6f32d637-0275-5f0f-a4a5-3364016863d4
 33 179a1ef9-306a-17d5-97a6-445ec0cbefd3
 34 04ff4fe9-a149-2ce8-97cd-05a16dc2f63d
 35 aa8e2a58-5782-7c82-b460-c0411f7dea67
 36 531d1d95-7105-2d24-ba40-c3da34376054
 37 64eefe24-3b7b-86ce-918a-40b333c2d330
 38 a3652aa8-0488-57b4-818f-529738ec5f78
 39 f4752d76-fb9a-35fb-8e48-b1f538f5b128
 40 9f5de8ac-ec31-6575-ba8b-c7b00dccbae5

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8311502446177634830837027221765512728536. Exactly this sequence comes out of new Random(12).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 122 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs