A858DE45F56D9BC9 archive

201307210917 1iq2ae

explained decrypted filler

seed 755

Metadata

Post ID
1iq2ae
Title
201307210917 → 2013-07-21 09:17 on A858's clock
Posted (UTC)
2013-07-21 00:17:59
Timezone
UTC+9 · title 09:17 against posted 00:17 UTC
Author
A858DE45F56D9BC9
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307210917) = 4125a918f0322d08d6786059a7a8b5ff (name+title)
GUIDs
36
Filler GUID seed
new Random(755).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
39 · predicted N = 36 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307210917 (name+title). Key = MD5(password) = 4125a918f0322d08d6786059a7a8b5ff, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 41819af3-d73d-12e5-96d1-af5baff83480
  2 42c61987-a290-3a83-935c-7c5dfd556434
  3 beffd92f-26d4-441b-b4dc-fb5df75ae304
  4 65186137-7914-6d2e-b3ef-c6439e7abf5a
  5 bfd75a02-800e-0951-9086-5f978f6c0c28
  6 0281fd0f-a623-349c-b786-4b1128d6574f
  7 d9fcb504-31d4-122f-84eb-8e3049040d7e
  8 f4b5b475-0106-10dc-baa0-027c103802e5
  9 924d5953-c793-3b77-9135-5af936f62d47
 10 baf7f236-4551-6166-8719-c0adb67dad70
 11 33e0e462-3620-49fc-9de4-ecb512e64579
 12 a1a77e54-2182-8d3b-a662-5a88f5a84b64
 13 cb74a07e-fb85-5ee2-b1c1-d36dc80b8465
 14 305d47f4-4c9e-23b3-8c99-73e2db56c3b4
 15 7adaf2dd-fea8-41fc-8087-280c11eb3d74
 16 40308749-b2a4-43d2-aea6-ce94b321a74d
 17 6d2bd1ca-b693-2894-9a67-d0e72071779b
 18 6453787b-89e3-07e5-8b14-20febbf4a168
 19 bc6d21b5-c2bb-1a0b-82f5-18e0f2363121
 20 0b722ca8-8b08-5b33-a42a-7ab9569850b5
 21 e8903a02-fb3b-1c28-9097-53c2b143df28
 22 35c13b8b-bfb0-0e49-ba39-733d3e4b2191
 23 fd0c5886-0b31-5b85-ba7e-e922f33f18f7
 24 52e0309d-a600-79a8-87b0-79649479ba3b
 25 91fd2b86-11fe-6aab-916e-5bda04dabdff
 26 0ae67285-3df5-1560-9990-ae0b4f268a3d
 27 ac1c68ea-2c26-0319-885f-c3247a61e606
 28 bd61d338-92b3-4720-9950-7e4c2d05493f
 29 a1eeb0fb-eca4-0b03-a6fd-2b6596f96936
 30 64e4eebf-7557-1e58-b577-0ec0d0447b4b
 31 008b55c1-332b-8e4b-8b05-04026a98f0db
 32 fd234033-94b8-22ea-b0e1-51408d4662ed
 33 da90179e-0e76-87bd-8b4d-db57ec7caa0b
 34 a6c740ee-f021-8bdf-ba00-fdd9ae30a834
 35 4e450039-d2c8-274e-9b8b-e3f3aa5ee580
 36 147b5b01-ab69-4a77-ab61-8a1f22205062

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 134603113648524420151057610401828824. Exactly this sequence comes out of new Random(755).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 39 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs