A858DE45F56D9BC9 archive

201305021435 1djddv

explained decrypted filler

seed 153

Metadata

Post ID
1djddv
Title
201305021435 → 2013-05-02 14:35 on A858's clock
Posted (UTC)
2013-05-02 06:35:34
Timezone
UTC+8 · title 14:35 against posted 06:35 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
32
Filler GUID seed
new Random(153).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
133 · predicted N = 32 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
8 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a20875a1-63ce-5b49-9cf0-bda904096652
  2 022e2650-de73-6a90-b86e-484213c0f5c4
  3 ef49f35d-d258-60d8-8478-fa2e4a1b3183
  4 14f6831d-cb46-1c82-b036-ad2cba10ea4a
  5 38768b67-caf5-2c99-bd80-4867dd065fbf
  6 78d13f6d-ff96-20b5-a321-9607eb2135a1
  7 710bba17-0a30-4b89-8b6b-3cf3b72fc0d3
  8 2a318c13-a5d6-1fc4-bafe-acd797619649
  9 2a3beca6-4c77-8406-8c80-09d0910190e0
 10 9be93026-e522-63a9-a988-44342e475bed
 11 51171c65-6693-0e05-b6d6-3ba9c57c2fdf
 12 d229dea8-b5ec-8464-89bd-9c30208ebf8c
 13 c31a0b73-84ee-7ccc-9ac4-4b4154b4ea66
 14 ad7f604b-9664-0dc3-ac0a-c1a2f4e05442
 15 7e6411ed-4b0a-0bd1-a24b-b106496b04a4
 16 55176027-a15e-5249-868f-c4952e5ab9cd
 17 16464770-186e-1d1b-a2bf-3840ff0dda66
 18 edbfe322-0f67-7c42-974b-ea188cd1937a
 19 e7c69f5b-a449-79a5-b67f-229fe86477b4
 20 186233ea-f07c-5277-befa-6acff18d92a8
 21 e97c2b35-3296-16b3-b9cf-70465db6d05c
 22 f1410caf-f296-3620-acea-72b22b877740
 23 ca9d8c73-e5f3-7ccb-8400-01a065d644a3
 24 2ef36446-05c3-4ef7-92a5-8bfee86a0bdd
 25 7b9cfc2e-dc3f-6aa1-9cee-2adeb4c6b1a8
 26 328db211-9ae4-840d-83bb-df30ae000187
 27 23ce7d09-9e4c-41d4-8e31-3dbd2d94971c
 28 089c6691-f528-44ac-8413-5a585862b641
 29 64a6a601-573e-7d7c-b98a-843cbe673e0d
 30 6b48ac22-75f6-2089-9b16-156b71c6d97e
 31 46744fa4-ff53-6527-bfef-7779b5bd3e4c
 32 c64d9bf7-32ee-67fa-a437-3ae6fcb5ab64

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 56612241860870051775137468447266. Exactly this sequence comes out of new Random(153).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 133 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs