A858DE45F56D9BC9 archive

201305161241 1efluy

explained decrypted filler

seed 784

Metadata

Post ID
1efluy
Title
201305161241 → 2013-05-16 12:41 on A858's clock
Posted (UTC)
2013-05-16 04:42:00
Timezone
UTC+8 · title 12:41 against posted 04:42 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201305161241) = b866688cb3ad4cad4f05d616d4dde455 (name+title)
GUIDs
40
Filler GUID seed
new Random(784).Next(9) ✓ verified
Run
Run 46 (seed 39,043,781) (seed)
Draw
11 · predicted N = 40 ✓
Machine boot
2013-05-15 03:07–10:31 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201305161241 (name+title). Key = MD5(password) = b866688cb3ad4cad4f05d616d4dde455, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 7c6f7ba9-3d0c-2b62-a65a-fa9d9a08dd07
  2 1f16ee71-8660-75f7-8d07-bf100dce9fbc
  3 359c81e5-4579-6ce1-9eda-6e2290a74e6a
  4 e48b86a2-9049-8f43-a501-7dda3b27b575
  5 71ee709a-8dc8-1548-bed4-8ffd4c15b2a0
  6 c32fd723-4f9d-6e95-98f3-8c0b5c8b1bcc
  7 d4e978ed-66d5-1f7a-8473-47d6f473a8ff
  8 a4358cd3-61d9-65ac-b8bb-3c0c9fc9b101
  9 756bf438-4b01-8c0a-bbfe-b09403731a8b
 10 0776e8f8-48dc-3051-b9a1-f1ce9a94baaf
 11 8ff35bf4-c0b5-79b0-b652-ac602fd50c0e
 12 5159cc3a-b037-4865-9c58-dadcb570a244
 13 d7cb53eb-23ef-54c4-9315-66dfbef7667c
 14 71c63440-1205-3c7d-ba6a-8b0a69de3bb5
 15 10810dc5-303f-6a49-8035-ca116be16431
 16 7f023b9a-d35f-52b6-a6e5-da1b37be0558
 17 8b258e79-0384-302d-85f7-9250b72ff58e
 18 d2aec15b-b6b9-0f32-b7a1-b1b40737e6cb
 19 59c1215b-f734-87c2-a43d-b63846d8bc10
 20 abb9327d-b0be-7877-a57f-3debd140d9b5
 21 baca27cf-da1f-87f8-b97a-20e6c311a724
 22 40bb99dd-b4c3-167b-baf6-af6e9862060c
 23 b22bb87c-3fc4-410c-b486-69ab7beab88b
 24 4158b799-b040-8e37-b311-0e5a82547ebb
 25 4d706924-20e7-48a5-8433-fa13c76429aa
 26 81dc0d40-1e81-7a27-922d-db3496e7c449
 27 2abfca8f-2aa3-8988-bbfc-6146bf79bc98
 28 1e8e0e08-20aa-45e5-9060-a499a143764f
 29 b9f956c9-4658-0bca-90ba-1d09517f9b23
 30 00857eaa-d2cf-4798-85c4-b620affaeeb8
 31 2ddba560-80d2-52da-abd4-47efcc83ae2a
 32 a5625cbd-1b9e-8ca9-8e12-4e58211d72e7
 33 3fd0e0a0-d69a-50d3-922d-817e52c68f85
 34 d81d2b50-016a-5543-b939-6fa5938fbf1c
 35 030195b9-d546-317f-adf0-9cbaae29d4b6
 36 3dcfe6eb-e1ab-6660-935b-5b9bbd362b47
 37 90c02b95-d863-4145-b4fe-7030be68a266
 38 d8589447-c7ff-6806-acd7-6a03b04e7fe3
 39 fed38f12-00d7-5a03-880d-678819447d6e
 40 532fb971-c045-16d2-9b41-a2235dc34164

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2768161683745365308781484784045855364651. Exactly this sequence comes out of new Random(784).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 11 of Run 46 (seed 39,043,781): new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs