A858DE45F56D9BC9 archive

201307200923 1io1gg

explained decrypted filler

seed 898

Metadata

Post ID
1io1gg
Title
201307200923 → 2013-07-20 09:23 on A858's clock
Posted (UTC)
2013-07-20 00:24:01
Timezone
UTC+9 · title 09:23 against posted 00:24 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307200923) = 2534b7e9c2130b4ee9c7bec1286dac5c (name+title)
GUIDs
40
Filler GUID seed
new Random(898).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
13 · predicted N = 40 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307200923 (name+title). Key = MD5(password) = 2534b7e9c2130b4ee9c7bec1286dac5c, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 bfcf02fc-aa74-754e-a05c-8d56d59c3363
  2 38a81060-71cf-2c9b-b32e-a2e40dd4ee15
  3 0d963e4f-9b6f-430c-8b53-1d0a66a01176
  4 30305031-ac7e-2d41-9622-4f02d700282d
  5 64924849-636a-5d94-b0c1-c6c6b4da1496
  6 b724496b-85f9-2899-9351-504f00f60195
  7 1a73e5cb-a806-2105-ba08-7da24c5b1b4a
  8 e3159414-5316-87ed-9fdb-6dd5c085ea13
  9 cbe90d2b-31a3-0c9f-bc77-d2fdcd51250d
 10 c89a6b79-cf6c-3d46-b372-aa7c16e88265
 11 edb6eebc-a6a9-7e8f-9535-5a8aed27b230
 12 f25eb7a1-cb6d-4aed-9d52-7157c080003a
 13 fb3a82a2-f2cc-8b50-adaf-b1f52e3db191
 14 32d48697-0491-5b32-8068-f04bff15e30c
 15 359f7792-2458-50d0-bd58-2801e471b369
 16 f1f1a0af-94e1-7fb6-a1c6-c50a9887539c
 17 dd857de0-179f-3dce-b041-d0854acd9989
 18 2d287c17-3a83-6654-bda5-e67108a86155
 19 c6507d84-956e-84e4-8034-67711f92cf0b
 20 8548a0a0-4648-09f9-b6a1-2dab932ee699
 21 19cb9824-9e1b-1f9f-94b0-8a75e1f1404e
 22 07e94b9d-bb10-1de1-ab27-5912a33c828c
 23 daddeefb-a647-6692-871d-fbf64d3aa666
 24 a406df66-5807-601e-b98f-3e5910b7255c
 25 39b7c6ae-888f-6c78-9d29-79f74c7a1fca
 26 2b785369-6247-0a8f-b757-e311b80800f6
 27 9baf822d-d203-0199-9668-c102eb421fe7
 28 26e9a45c-1983-004c-81ae-3c6eeada38a0
 29 acdf6670-a904-5e6e-93f7-24a7983114c3
 30 55280c60-b82d-287c-b992-1640fd91065d
 31 ffa52eb1-427d-6d3c-9e05-4cf349397936
 32 00ccfe33-3ae1-8b71-a186-dc7fbdaa7551
 33 08a5e5e5-ee04-39a6-afe9-9ade0bec8bb3
 34 ab76fb1e-ad2e-47ac-878a-6a5bec010978
 35 afc65638-2aca-12a6-bc72-32209f0fa5e8
 36 80d74bb8-33fd-631e-8ddf-b3a27a16d6c5
 37 ed576231-4b27-7e50-95c1-f2c9ee48149a
 38 cafcb04a-6e49-356c-a6a0-979910eab150
 39 a03921e8-e001-10ef-95bd-b57fb236defe
 40 5b97ea2e-90b9-779d-940e-f4c7169536e7

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7242522803748557368011666000526834167317. Exactly this sequence comes out of new Random(898).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 13 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs