A858DE45F56D9BC9 archive

201305161409 1efq7j

explained decrypted filler

seed 662

Metadata

Post ID
1efq7j
Title
201305161409 → 2013-05-16 14:09 on A858's clock
Posted (UTC)
2013-05-16 06:10:00
Timezone
UTC+8 · title 14:09 against posted 06:10 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201305161409) = 0004dfcdc34de1ef69ea2f52b5f734c7 (name+title)
GUIDs
40
Filler GUID seed
new Random(662).Next(9) ✓ verified
Run
Run 46 (seed 39,043,781) (seed)
Draw
13 · predicted N = 40 ✓
Machine boot
2013-05-15 03:07–10:31 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201305161409 (name+title). Key = MD5(password) = 0004dfcdc34de1ef69ea2f52b5f734c7, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 546c25ae-c071-5f06-ac31-c11a4b82cd99
  2 786bbf8a-e8c9-0f7b-803f-a16fffc1f525
  3 4149c06c-8e60-4b47-9589-fc70ee8dbb15
  4 2f2a4026-8a65-70d0-ab45-1157767d79c7
  5 4a799a90-b8a2-08a2-b683-a43bf7e1209b
  6 ac178076-ed11-0435-be3f-61b5323b69e0
  7 cf2b759b-7d79-43f0-8520-d16c8c92c1ec
  8 32a10a42-1186-599e-a0d2-6275887e0eb4
  9 23721eff-d7a1-733c-a047-add079ec9a2d
 10 eb0d4ed1-f15d-346e-8387-e74305fc56c0
 11 de1644c8-4244-07f8-b233-f295c92e7e69
 12 9b652301-2d51-265f-8649-a516df9bcac3
 13 4dcfbda3-38e5-6bea-8c3a-051181d2eda5
 14 adad15fa-f2d3-7e8d-9d4d-6e65b183633b
 15 b30333aa-d796-320d-b141-fb4c7a193074
 16 348864fa-0267-46e1-8b6c-0f5fda78b7fb
 17 2b27975e-23ea-1d60-8371-ad07f5fa10a4
 18 6c84d24d-3656-338f-9c0c-e80521eab826
 19 34967938-70f8-5190-9122-fd125e254945
 20 7ded04a1-1ca5-5df1-9de6-4ebc1367e195
 21 40923240-4f86-6019-bac1-0067d93a8962
 22 8a3aa21a-1e90-2242-91ff-9e0a88140763
 23 4f4e2232-d561-72b8-a703-ce6f8f455d0d
 24 cf1eb568-1021-2026-b57d-4cae12ee798e
 25 11a86e94-bf31-5ff1-bb67-f8f0ce53d268
 26 797d408c-2cf2-2bc2-9708-e846e0e35e9e
 27 cbe6952e-f455-0ef3-8ab9-999787f9963e
 28 f9cacbcf-d0e9-7024-8227-3235c6fdcd61
 29 3e0f7b33-57a7-3ed3-9364-b5170c40f9f4
 30 4ebd9dba-1908-21d5-837a-4be1456fb5b7
 31 55001e10-d8e2-56e4-952b-98c2f40243b6
 32 ef0defc9-0003-7aaf-a372-6fc1e3d91eb1
 33 8b1f3cb2-cec7-4056-b9e7-a4cd6ad6a9a4
 34 5f5d50f3-f2d4-5885-9830-08821baa1597
 35 a8bec8e6-58f3-7e92-aef1-035a31d8b126
 36 92b22b5e-1d64-41ca-8ed3-8d2914ecb6af
 37 85b471fb-81ed-33af-872c-bf5befa255b3
 38 0c1b6e7a-5e6f-476a-96fc-0c9fbf56967e
 39 273b5b6e-ffba-61a9-ab8a-0a086fb9f428
 40 6979595c-6dc9-7724-8198-410f4333ed07

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5047004573026734135562725207325745743467. Exactly this sequence comes out of new Random(662).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 13 of Run 46 (seed 39,043,781): new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs