A858DE45F56D9BC9 archive

201307210915 1iq26g

explained decrypted filler

seed 757

Metadata

Post ID
1iq26g
Title
201307210915 → 2013-07-21 09:15 on A858's clock
Posted (UTC)
2013-07-21 00:15:59
Timezone
UTC+9 · title 09:15 against posted 00:15 UTC
Author
A858DE45F56D9BC9
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307210915) = b8880f8d544a3c2c59733c2032c42229 (name+title)
GUIDs
40
Filler GUID seed
new Random(757).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
38 · predicted N = 40 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307210915 (name+title). Key = MD5(password) = b8880f8d544a3c2c59733c2032c42229, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d92380c7-741e-1eca-9b00-650078810801
  2 02ba93e3-61a9-853c-a90c-7084fc7173ae
  3 9231f137-8bb6-8d38-99c7-779b44f94eb5
  4 60afa515-99ca-163d-b922-5f7629bca882
  5 fe5fdd8e-fb14-8ebd-89c6-956dbc68069e
  6 c3ee0d8c-5319-0f75-b691-37cc351c8dd1
  7 0807b14e-76df-07ce-96bc-f06f466f905a
  8 2f9510e4-3b61-1d30-b75f-72a67512f77a
  9 bfe54aa8-266d-5ffc-a13c-0d60c67010df
 10 5f1d1687-76ca-372e-9fda-191ed5907f15
 11 b34439f0-1c68-86b7-8cf3-92bb4f6a9d0b
 12 92fc9b55-6120-4f8a-9b8e-395cc286aa07
 13 edac9527-35ce-0704-a869-3b9194f866d4
 14 be1b16ad-e6ca-2d07-8aca-e23aeea3f3d2
 15 de420a59-43bf-7ff0-bd87-8736d65d7cba
 16 8f2a30e7-322b-79f8-9808-8946ffcc5b8b
 17 91de9089-c481-0e7f-a83f-398220ed3fcd
 18 0d4ea84b-f40c-3bba-9944-556d2b7352db
 19 0e7b7ecb-3f7b-11c7-a4c8-564b629be767
 20 f5f24a66-57ac-3b1a-a21c-05c0721702e3
 21 c74ecd3b-b7d9-3a6c-ada4-9ccaf99f5a84
 22 d0baf90a-70d4-56d6-a67f-51a43a4742c9
 23 6d5d558f-7693-8fa7-a778-a7b01221b1ad
 24 c14b3ce7-1ec5-4753-892f-9ed3c2eb2b68
 25 06af5ef4-22d5-8e5a-9f12-463e0e5aeb70
 26 8292e697-23cb-3b63-ab38-0cdca7623471
 27 f7968041-acaf-689d-934e-84f83d74928c
 28 75eca9ae-9fd5-698d-9a19-1d9cab2f8f8f
 29 024522e7-bd77-57d2-8526-dfeed2078249
 30 c7183d19-7200-60f7-ab51-ef806fc14d25
 31 32f59395-e337-5525-99fc-83ab126a2900
 32 a9bf484b-faff-7ab6-a920-04ed32ded72b
 33 daa03ef5-170e-6862-8b93-eafef90249dc
 34 e605cad9-88fc-8b4b-890a-d34a1b673e8a
 35 63d768bf-4ca7-8347-8305-169371f76855
 36 3c7bcb97-3ec5-54a5-bafe-edf14f9a863b
 37 a232a242-32a5-03f6-8f06-2552b593d0db
 38 53253da2-722f-2235-8fbc-f7751b423319
 39 94533526-65cc-84d8-8d82-e94def7e5bc5
 40 cdb53fe8-d279-79ba-9d7a-5c704d7526e0

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1881800153840277031335848366565768850287. Exactly this sequence comes out of new Random(757).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 38 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs