A858DE45F56D9BC9 archive

201307210927 1iq2w2

explained decrypted filler

seed 740

Metadata

Post ID
1iq2w2
Title
201307210927 → 2013-07-21 09:27 on A858's clock
Posted (UTC)
2013-07-21 00:27:59
Timezone
UTC+9 · title 09:27 against posted 00:27 UTC
Author
A858DE45F56D9BC9
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307210927) = dc5d343c2918962504e149ecf3e8eee8 (name+title)
GUIDs
36
Filler GUID seed
new Random(740).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
44 · predicted N = 36 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307210927 (name+title). Key = MD5(password) = dc5d343c2918962504e149ecf3e8eee8, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e5d4f062-a6b8-2dae-827b-67c2fd4a0270
  2 7f2c2ffa-b968-8cb9-91cc-8932ba44c91d
  3 5da64fb9-c58c-0c28-b7dc-3f16779f75bc
  4 4d970a80-df76-4571-94fe-30d9fb816b17
  5 c20b8c9b-8b40-2b86-bf11-23cfd526600e
  6 90af3245-7e85-2975-ac6c-4e77c751020f
  7 01a6b5d0-6ddd-4d95-b290-3fc4fabfce28
  8 b37a6dac-f893-6552-a712-2b816a1b5316
  9 c643c642-ca6f-4ae1-871d-f0810454d90e
 10 8fcb6763-4f55-10cb-bf9a-12087c0c02d1
 11 03bd3680-7c26-4ba2-89c3-97d13770d600
 12 3bbbedc4-c859-15a6-af5c-fe2076ad0c46
 13 6a8e04b7-727f-3ec3-9bbe-6461fbabf75a
 14 b4563b74-169a-4bbf-8afa-dd325677295b
 15 ae4bfb65-1431-88ac-8b7c-5238c5f00760
 16 0f6ffd11-8636-160f-a06e-d1df7002d0a4
 17 10b5d202-5a38-899e-8a41-6d1d488c4197
 18 71d0a758-8e4c-794c-99ee-66039a310a94
 19 f6d62861-9eb5-6223-8adf-c4e249d634ce
 20 f7f73701-96c0-738e-a4af-f31b3ee7ba2e
 21 0acd8c7f-848b-1be4-acad-1388369abc1f
 22 4ae93121-724d-3232-aed8-baadf7b21dc0
 23 8f6a774d-567a-014e-8f06-3b1837cac6e2
 24 93c686a4-9e13-4b64-859e-ac58559ec349
 25 f024a64e-84f0-22b8-9bc4-3d24134c2698
 26 bfbb503a-b7f4-464f-80d8-f126b82ef771
 27 083abb36-180b-18bd-956f-8f21d34f9b7d
 28 5062e896-6483-122d-941b-8a05cb3b662c
 29 4a58bbf5-7fdf-8d12-aad2-ecfa23d85cfe
 30 3a4df99c-21d5-07a5-8523-34c8fe0f5ad4
 31 4b9ea9f7-18db-329f-a6ba-f969da496f38
 32 d42c797a-ff0d-3005-92e7-d4fe0ac958a9
 33 998c50e3-f2a6-7ed9-a90d-bf4dfdf1d565
 34 4b8fc07e-e974-4a61-b380-1dae7b4474c2
 35 3041ff20-b2f8-0380-a03a-105c968805d7
 36 ce210e33-a154-7161-96ad-1467f17d587e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 280422464141348187671304241180337407. Exactly this sequence comes out of new Random(740).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 44 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs