A858DE45F56D9BC9 archive

201306112059 1g5wuo

explained decrypted filler

seed 583

Metadata

Post ID
1g5wuo
Title
201306112059 → 2013-06-11 20:59 on A858's clock
Posted (UTC)
2013-06-12 00:59:52
Timezone
UTC−4 · title 20:59 against posted 00:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
3,600 hex characters · 1,800 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201306112059) = d900c5c00e53c73e1369c4b4ef8f4af1 (name+title)
GUIDs
56
Filler GUID seed
new Random(583).Next(9) ✓ verified
Run
Run 47 (seed 1,776,839,421) (seed)
Draw
15 · predicted N = 56 ✓
Machine boot
2013-05-14 23:26–11:26 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201306112059 (name+title). Key = MD5(password) = d900c5c00e53c73e1369c4b4ef8f4af1, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 7416c93a-0204-2118-b664-07adc50f6e93
  2 3da006cf-5d1a-741d-a1e4-60f8ef10cf53
  3 33589e78-c548-2a5e-b92f-590a49499d5a
  4 104598dd-7848-8860-bc8d-3a6d8492bc08
  5 f83177ab-acc3-3601-9b4b-3ce4629bed65
  6 e166ed9b-bcfe-0dd1-a24a-968c14b7b0c5
  7 f5f893d5-e3f7-1ae9-8444-a497971c0533
  8 81a24a11-8fff-8a33-8b5d-6b465a339552
  9 08a415df-a5e1-0705-a22f-f4858a547a00
 10 f8d3e30a-bee8-22c8-9c6c-64f934c79146
 11 1716bb76-ddeb-7040-86a0-151795cbd741
 12 fcf60b74-5bbf-5cb8-b14a-edba020e0bc1
 13 f1129bc8-c566-30bb-8d01-8ffefc8bec0c
 14 a1ccb74b-5952-74ec-9aba-ea3a4d0beecc
 15 f4f8ab6e-1510-07e2-a6b6-669cee5ea97c
 16 2679e2a7-bc74-18d2-afa0-293227459681
 17 aa12524d-c871-8e91-931b-73432f52d662
 18 c57aa72a-507e-491f-9e19-d803eb6328d7
 19 ea79db48-9a17-4456-99dc-95ca51169418
 20 5431b28e-4c88-0914-9692-57433d499b7c
 21 920dcc9e-0a2d-2d5f-9213-a8e21bae2bbc
 22 b3370d7e-c98e-7b1b-90b7-64050ef967d6
 23 1ff2aeb5-87a1-4d72-ac3e-8dd482df7521
 24 2a2f0020-717a-6a96-bd2c-4c3033e789c6
 25 b0c3f234-51bb-7d34-9b55-ecf17085a1e6
 26 58b04454-db3c-4168-a481-b790e3cce1bf
 27 9054c414-95a7-10fa-a5b8-1b71e3e2d3a8
 28 c8daad98-61c1-8cea-af8f-2c2de2bb7e44
 29 60ff75f5-011d-552e-b340-aef0814f4734
 30 ec003829-861c-5ba8-bd7d-35c2856926f1
 31 d9f7ec9f-b5d2-3e8a-b7b8-d4b049a14134
 32 1a28043b-218f-0193-98fd-faf4b387cb17
 33 1ab67dca-9788-62d4-87f0-d33310ed79aa
 34 84491bbd-5c8b-55e3-a07f-b68d06b5cdc5
 35 25c7f1db-2795-1621-92fe-0444d1b37f32
 36 d7cf4bb4-f5e1-00fd-8c25-36697afb1688
 37 684183c8-0026-81ca-bf39-5ca7a71d52a3
 38 890f3c61-5f9e-6130-99e1-e0cd0cdd04d2
 39 6aaba9ad-e504-16a9-b8db-52c641204049
 40 bcef6dfb-1475-82a7-8d0b-447439cc1b09
 41 22cd1c6b-b044-0927-8de7-4b8c93dabf76
 42 c54ab5e0-275e-6aae-8a98-76151b9341ad
 43 5296dcc6-9899-67cf-8659-57915e6c6cce
 44 a91065de-1d34-233a-97c8-0d4765e1e545
 45 78e7331c-7bb9-2c88-830f-5e5d720ac3d7
 46 f51c2008-b1a0-134d-956d-48ac8cd929a1
 47 066b6a0d-3787-6434-93c6-5d9de0da67d1
 48 cd614be3-9958-543a-aca4-3ddc7745a51a
 49 b93ad284-7ea8-08b1-9e27-93ecd32af4e6
 50 c634b27a-092d-2f18-815c-8052bea427c1
 51 c42d8bda-e13b-18a1-8d71-ab15401d3899
 52 a7d9cf7b-11b1-49f5-8fb3-3a9adfc1db52
 53 11d8cff2-6659-2464-9328-04e1e2e10871
 54 bd5275e5-8d06-2e99-bda8-7cc8b0baee30
 55 300d9fd3-31b2-8f9e-bfea-761a05bc14ed
 56 8215600c-0fdc-3aeb-a742-88a7ae8c6281

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 27283018027537018440274674185530651086180662216502142283. Exactly this sequence comes out of new Random(583).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 15 of Run 47 (seed 1,776,839,421): new Random(1776839421), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-14 23:26–11:26).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs