A858DE45F56D9BC9 archive

201305280507 1f5puk

explained decrypted filler

seed 684

Metadata

Post ID
1f5puk
Title
201305280507 → 2013-05-28 05:07 on A858's clock
Posted (UTC)
2013-05-27 21:07:46
Timezone
UTC+8 · title 05:07 against posted 21:07 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201305280507) = adba27d3b77272d8fa58e44113d71688 (name+title)
GUIDs
40
Filler GUID seed
new Random(684).Next(9) ✓ verified
Run
Run 46 (seed 39,043,781) (seed)
Draw
67 · predicted N = 40 ✓
Machine boot
2013-05-15 03:07–10:31 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201305280507 (name+title). Key = MD5(password) = adba27d3b77272d8fa58e44113d71688, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 f9de14d2-ad9d-09aa-8c13-f295b5ff6e69
  2 f95670e5-4702-4b91-af76-bf3c63fa6b36
  3 9581ef8e-0411-7c33-a04a-c9dfd596554b
  4 acd23b5b-9bc9-4c06-8069-f43ec1a12ad1
  5 6052da0a-a126-0bdc-a5be-8297d6b3a11a
  6 c7eff533-812b-29ef-915b-e40511a09572
  7 36b6555a-b8b3-3bc0-9174-2b3f8e90318d
  8 ff771772-e329-5741-a7c6-1652f1d5d004
  9 d0d3bb1f-0c65-5fff-b34a-695944a12f66
 10 1ef6c86b-ccf7-4ff7-bb92-53dee65af9f5
 11 f26cda13-06be-1d83-a197-738f1791b40b
 12 eba5c404-1ba0-4697-83cd-8c80b181c101
 13 e15e8189-aa00-7fff-808b-d1a93de18862
 14 3e70aa5f-809a-2090-af04-82ae16ea8cca
 15 ed7e29e9-f00f-6d17-837c-6366eb3e3bc7
 16 75d490c3-261b-1377-a667-4d461a280457
 17 2fee8151-9b17-3ad3-b351-f88bf9cbac24
 18 5e242018-510f-0bb5-8a49-31050c6cdfb5
 19 5fd68681-8903-1f69-9b6a-b63e92336f7e
 20 f9914517-3391-132b-84ff-ad4964f9b2b9
 21 ae68693e-a4b9-6ce7-a9c0-2edf0384ec9e
 22 b1f99e74-d35b-50d7-8388-092cdee33d22
 23 bd37cb69-e217-5d77-875d-376b98f2b5d8
 24 b2bb9319-b164-8166-8407-093999bcfea1
 25 5d4b7bf8-739e-6000-81c8-5dce211e24c8
 26 42a63cb8-7140-43c8-9f8f-ae087c6ca5fd
 27 8fa58fb0-e8b1-0925-8f8a-3c6d8dee23d7
 28 47a45717-b1e7-42f6-805b-dfcead10aff5
 29 f771c8bf-7e91-488b-b230-4ea83de25e1e
 30 c29c8d7c-6127-87c3-9575-79acd4af6e1a
 31 e679f181-b789-6844-a264-0a3c65991be9
 32 1b5f940d-3b8d-538e-96ce-5e745de8eb63
 33 134ccdc7-3fb6-3049-9fc5-27875b85f77f
 34 2662a656-f9eb-12f6-bfdd-757d073e3521
 35 6bc967e0-23ae-4181-bfb7-9d0cc30b4be1
 36 6c66c205-c14e-3cfc-822c-494a7ce86600
 37 9a88a6de-ef8a-558b-bc5e-6feae501b42d
 38 65f9a893-4ba3-44a6-a392-90a64e4965ac
 39 70387383-378e-4539-8de0-b3d42b75c243
 40 15faa631-43c4-34e6-b0ad-624228b11f59

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 0474023554147261301165586404486531435443. Exactly this sequence comes out of new Random(684).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 67 of Run 46 (seed 39,043,781): new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs