A858DE45F56D9BC9 archive

201306072059 1fwfhn

explained decrypted filler

seed 313

Metadata

Post ID
1fwfhn
Title
201306072059 → 2013-06-07 20:59 on A858's clock
Posted (UTC)
2013-06-08 00:59:56
Timezone
UTC−4 · title 20:59 against posted 00:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201306072059) = 59eb7e68565b771666c8c9fc70edef5e (name+title)
GUIDs
40
Filler GUID seed
new Random(313).Next(9) ✓ verified
Run
Run 47 (seed 1,776,839,421) (seed)
Draw
7 · predicted N = 40 ✓
Machine boot
2013-05-14 23:26–11:26 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
10 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201306072059 (name+title). Key = MD5(password) = 59eb7e68565b771666c8c9fc70edef5e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 72a1e3c9-499b-2eff-8bc2-172998154346
  2 cf9f33af-2362-575b-a83c-f4ce8dfc824e
  3 1422eff4-b87d-407c-a58e-477210fbe63b
  4 79b99c99-3334-3509-a5ac-14383bd957be
  5 b58051be-f7a4-42c1-97e4-f211d2cbd7f4
  6 b6812bc5-3ccb-01ad-a33f-a649ecc84d10
  7 96e10880-ded0-1003-8c7a-57319aedbe97
  8 b9e2b71a-de10-4a77-9845-bc39d80268c8
  9 f0fcfe5a-5222-6011-8c5d-f587b40b8616
 10 dfa194fe-f3d0-69b7-9d73-cd82c76df0ef
 11 759b3a60-b963-73a0-81f3-a9e3e08f0513
 12 b3c4eaa8-4d5b-7eec-8442-9311542775b1
 13 6c496b52-43e0-7f99-a1b8-ee8e827700c9
 14 ec83a567-0dbe-2d20-b9e2-90a6522ad352
 15 bdb9c3a3-f1be-0c59-987e-45b309b42061
 16 fbf918e4-3005-442a-b000-ac1c35fa05b5
 17 5c55867c-bbd8-371f-9f83-2503a4161ae8
 18 0733ac26-5a46-001c-9654-0a72c2189efd
 19 9852cf3d-053c-1538-a46f-7e053011345e
 20 8e93ce6c-6678-42b7-92a8-489bfc57f3d4
 21 e741570b-cc81-3943-b178-da69c3e11772
 22 5cc85a70-6d7f-5e1f-98a5-89d75f4a5cdd
 23 12df93a3-fc69-83be-912b-3d35b7441f9b
 24 a870e710-0d2a-3551-ae39-9789013d4023
 25 e90540fa-0e0b-33e3-b16f-0d80b33331b9
 26 82524922-30b0-7851-8fdc-e1073c8c7bd6
 27 54eef35a-07b6-0e8d-b5e9-8d3539841ed5
 28 6b8bddc2-935e-5268-bedf-3749c48e4f35
 29 9ebcb453-69d3-0465-ad9c-6579a205a509
 30 2a9d120c-f719-1b89-a4b9-f03ff3ad9198
 31 2c3708a3-bdb5-6066-9828-6fc72f8ba723
 32 4ac7eb33-1781-8ce4-b3bc-b0cff163772a
 33 916805c7-cb33-119b-9f51-a101968284f2
 34 639c7cb7-be26-7091-95eb-caa78c0411c1
 35 29bd8d24-41f5-8b34-b47a-5d15f56741ca
 36 06fb9c0d-6c35-2f24-a20f-c98aaafc85fb
 37 f95e2668-b667-2aad-a79e-8200f25be06f
 38 a7b9dd96-2b8a-664f-a456-4532811052a6
 39 3b6f084c-2178-88e3-93cb-441ceabcdd42
 40 9b2f4f96-eaf5-61a0-a758-0324c1f1672d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2543401466777204301435833705016817822686. Exactly this sequence comes out of new Random(313).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 7 of Run 47 (seed 1,776,839,421): new Random(1776839421), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-14 23:26–11:26).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs