A858DE45F56D9BC9 archive

201307200949 1io311

explained decrypted filler

seed 965

Metadata

Post ID
1io311
Title
201307200949 → 2013-07-20 09:49 on A858's clock
Posted (UTC)
2013-07-20 00:50:04
Timezone
UTC+9 · title 09:49 against posted 00:50 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307200949) = 3fd886d03544557d519331edf1c60d09 (name+title)
GUIDs
40
Filler GUID seed
new Random(965).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
26 · predicted N = 40 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307200949 (name+title). Key = MD5(password) = 3fd886d03544557d519331edf1c60d09, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b88434ab-8b99-7fb1-8210-7c6401216664
  2 3dead963-8696-8bda-9f8f-d949b24f7f2a
  3 3bc1f22d-1905-2f2e-9c77-75c628e1312d
  4 ca422fff-66b2-490f-aa5e-936f5bfc3b38
  5 41df03af-7d0f-8498-b207-1855e7807606
  6 e681fc92-26e1-7d4d-a971-90abc691d12d
  7 91b14f2c-822b-26d2-8a55-c2c0adec9c81
  8 1a76432e-6108-5542-ab33-02015846d996
  9 dbfca552-302d-3d3d-ae67-43daeb958551
 10 da2d9fac-ffde-1d1e-8f1d-54ba29453376
 11 35f6c729-fc5f-26a5-b489-e879a3a6d44f
 12 7eca0ff9-0869-74de-bc6a-43a72f04c2fa
 13 d132d33b-478f-0d28-9355-705a97bcea49
 14 532ea63f-b033-4cc4-b700-780e45174e58
 15 d87c12ca-5dc8-43cd-983e-1fc4c8cbddf4
 16 f5913b9f-4e12-6326-bbb0-b077ec301031
 17 66a1c844-8a09-42b7-a560-a640e3c06bc8
 18 175da6f1-54bb-20a2-917b-9cfa335066d2
 19 5490c6e4-e7e6-798f-bcbf-65ff64197f98
 20 f4e9e022-f62d-8fcc-9ae4-b65999028d01
 21 e1a897ef-580f-0a4e-923e-c3673d42b205
 22 887e618d-9651-56f4-b54a-d847a4296f43
 23 be60ffb0-9a00-0ee5-a9ba-fc67d7695c88
 24 13a85418-8833-1640-b0e7-7bc2d29e37de
 25 a11bdd08-a534-2266-a757-bb6ba276da22
 26 1fc74291-fdff-1ac4-bcc9-1dd7844d73ed
 27 ba4073c6-5ab3-5a7c-a151-7fc7a296daef
 28 064440ea-f669-58ac-a5f5-55596b9d5771
 29 b5412605-8ab9-020b-a990-76a33b95fa3a
 30 fbaf3ae4-724d-2838-8a71-e7705b090620
 31 64096d9b-77e6-398d-9b99-372604b562b1
 32 a34d8802-4109-54af-a259-a43ce028a595
 33 c4f241cc-088f-3153-b688-1f45c49b0612
 34 58c22bf4-f56f-1587-89f8-1529a85bc4b0
 35 a1855dea-b36b-51d6-9f9c-b435e7080c80
 36 977bec0c-a1a7-5a8d-995c-7c45962b6c81
 37 09a36347-946b-3486-abb4-66f01d101a56
 38 5139412d-0bbe-0a86-abb3-95d221b94261
 39 3838ef0a-d653-5607-9d63-73d9b7521ca5
 40 cbef4f72-93f0-721e-8ed2-5426e1b65509

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7824872531270446427805012155023531553057. Exactly this sequence comes out of new Random(965).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 26 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs