A858DE45F56D9BC9 archive

201307210921 1iq2ij

explained decrypted filler

seed 752

Metadata

Post ID
1iq2ij
Title
201307210921 → 2013-07-21 09:21 on A858's clock
Posted (UTC)
2013-07-21 00:21:59
Timezone
UTC+9 · title 09:21 against posted 00:21 UTC
Author
A858DE45F56D9BC9
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307210921) = 321eca066b7371d2ce673d634b6fd225 (name+title)
GUIDs
32
Filler GUID seed
new Random(752).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
41 · predicted N = 32 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307210921 (name+title). Key = MD5(password) = 321eca066b7371d2ce673d634b6fd225, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9721edb4-de28-5290-9420-eaeebbeb1420
  2 0d55d312-110c-42c2-8a04-3d46c91d7f6e
  3 4fb08e03-82ca-30d4-ab50-0b39790d68c9
  4 1449bb88-73fc-0cea-9b04-49579cacf682
  5 ff31b0b6-34d3-6534-950a-3cff7c51a737
  6 3921d0b2-10eb-60a7-aef6-74e393c597d7
  7 e0179a95-0809-7476-aeb4-53c88d8589ac
  8 73140b6e-1331-6f85-bd14-3fccd065c5b1
  9 3f15468d-41ef-020a-8680-af9909cc3445
 10 dec66747-7da5-56eb-b9a5-3f7a35aea686
 11 bc075718-b161-20c0-bccb-30b58fd2ed91
 12 fad23fe6-e08e-56a5-84b8-3010d4e92b7e
 13 b56399ff-ce35-51ee-883f-dc519ad36e84
 14 ef16195f-6a17-65ca-b816-624ec0d6a0ce
 15 9c3dbd12-6ecf-3a94-a46c-7386133df506
 16 768806c9-0d85-679a-86ed-fce4477b5a33
 17 24b4e4ef-3122-848a-9326-d576f1d5b780
 18 d58f6b67-b259-2991-babc-ad4b0103be93
 19 43cfeb00-5a32-07e5-806d-936e438bdaa5
 20 7f6b3ef1-6970-47e2-b642-04d747597750
 21 51f1710e-8d0b-600a-a9e4-f8443a3af9dd
 22 042067b6-aec8-342b-b924-45621b6314e3
 23 850abc26-2ca4-08f1-8a72-8e71d908e10a
 24 6a0bb5ee-cfff-6722-9269-5f8eba010274
 25 96c5c6ec-51d0-3d28-b942-a2daf11cb2c8
 26 cfa696a4-851c-1253-876d-d704bbee6dd4
 27 da748d34-6e1d-4fe6-b4ca-e9dedeffbe84
 28 2950d830-bae2-542c-ba14-7c49d84515e9
 29 7c5b1662-36dd-2635-af58-922795848a3b
 30 651bb465-a394-6e0c-8e75-d314d3553c08
 31 f4e4fad1-a2cc-754b-bc43-3ea9b09e3cfa
 32 a0dfe305-e0a3-486a-8622-e9c889e45b05

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 54306676052556368204630631452674. Exactly this sequence comes out of new Random(752).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 41 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs