A858DE45F56D9BC9 archive

201305291043 1f8szk

explained decrypted filler

seed 304

Metadata

Post ID
1f8szk
Title
201305291043 → 2013-05-29 10:43 on A858's clock
Posted (UTC)
2013-05-29 02:43:45
Timezone
UTC+8 · title 10:43 against posted 02:43 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201305291043) = 0a0c74b954db0fc639108a8454718d5e (name+title)
GUIDs
40
Filler GUID seed
new Random(304).Next(9) ✓ verified
Run
Run 46 (seed 39,043,781) (seed)
Draw
71 · predicted N = 40 ✓
Machine boot
2013-05-15 03:07–10:31 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
12 · 2
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201305291043 (name+title). Key = MD5(password) = 0a0c74b954db0fc639108a8454718d5e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 bb8bbe03-1178-4585-920f-23a79d949fd4
  2 e087afe3-ab4e-0d17-a9b2-004db27bb6de
  3 f59f6db5-6374-249a-b5f5-1a580b77b6fa
  4 534ae3dd-ec27-40b9-989f-93c048f59398
  5 4606dbab-b95e-41b3-a495-0ad357d0800e
  6 784ca010-a7e0-2fb2-9306-f6c0cb15b8a2
  7 cde57286-0a14-161e-bf1a-16222ff8e06f
  8 d2f73827-01f7-8a3e-af54-1e46be6412bf
  9 4a774817-e622-519f-b7c5-7ea123d8ed1a
 10 9454dab2-ebbc-3e8b-805d-3e7e40158ef3
 11 d50fe39e-c83d-2d55-8ecc-d85ebc3ed4c5
 12 ff73f801-e61e-79c2-a1ec-b75e07f0b722
 13 4cd8e008-abca-52b2-854d-3d1d3bcc0392
 14 0b74b93d-d636-5509-8b1c-4b238aed3827
 15 6fcf93c0-b65c-6949-8c73-cfdb80d1c9ea
 16 986bc8dd-66bc-7348-9caa-76900db65291
 17 1116a5b2-f6ff-59b6-b45e-a4314271fa07
 18 f89271a4-7004-4c59-b996-809bdfd7769f
 19 ee2f8da6-9f4d-8a5e-86ea-466fe51b9f5e
 20 5c1d4597-582c-07a8-a24b-83cdb876046f
 21 3b59a65e-e954-16ab-b6be-b3c5924708e2
 22 58a65381-cb6a-3100-b5e9-6a4d93538748
 23 70ac41f5-7e11-3cb8-ac77-2fcd4164194f
 24 18f11f86-0fa2-2146-9227-ce6f3bcd68ca
 25 5c9273aa-63b5-46f7-9eb1-dd2c498ac5c7
 26 18865a01-dec0-01d6-9ed2-a81b386336d8
 27 84617b2d-8ec6-27dc-a177-644b4c0941af
 28 9eee76f4-2d0c-0825-9b4f-13b8730347dc
 29 dbae9257-b229-42e8-a16f-32bf52cf3da8
 30 4312d157-b562-8597-b6c3-988eee1c3d16
 31 29f0cc82-8e7d-371a-959b-a685fee0170d
 32 320685d1-a680-4fe4-a616-d887058465f0
 33 da3dd711-8ac1-49bf-842b-2489a8bfdc4f
 34 7b073832-f0b4-5a4f-8115-1da6329fab10
 35 af6aff83-b0c1-7698-b08a-04fe2437fe2e
 36 0be019fd-d554-8d42-b2d4-ce445e9e16ff
 37 0c15cc9e-ce4c-7a6e-afe4-468a001c33d5
 38 59fc32d5-b124-5935-9288-68a5c1c3e3d9
 39 bdfc9ffd-5272-32c9-80f7-ca9a5d845fc7
 40 32e4c394-cac8-596d-acbb-ba1bb69df229

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4024421853275567548013324020483445787535. Exactly this sequence comes out of new Random(304).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 71 of Run 46 (seed 39,043,781): new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs