A858DE45F56D9BC9 archive

201307210931 1iq34s

explained decrypted filler

seed 737

Metadata

Post ID
1iq34s
Title
201307210931 → 2013-07-21 09:31 on A858's clock
Posted (UTC)
2013-07-21 00:31:59
Timezone
UTC+9 · title 09:31 against posted 00:31 UTC
Author
A858DE45F56D9BC9
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307210931) = 45ab6e18a81f185a78a9dad91342adee (name+title)
GUIDs
40
Filler GUID seed
new Random(737).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
46 · predicted N = 40 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307210931 (name+title). Key = MD5(password) = 45ab6e18a81f185a78a9dad91342adee, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ca3ed02c-622c-622f-9b9c-16e49ccb5516
  2 a1863363-889e-0752-b366-74707537e320
  3 d3dd77fd-8511-853a-8c6c-04868cb6289c
  4 e5701462-d3a6-78e2-b7b0-6ae569f27104
  5 47c955e6-18ec-86b3-b492-5651363507ac
  6 ca1a8bbc-1786-568f-ae5c-9e7cbe97fb6f
  7 69f5f24e-ce81-1ec4-9c20-27b4c94738ca
  8 7f3bc813-914f-10f2-90b7-790f82d4d06e
  9 7c3683e5-53d7-1d5d-a40a-d8499706ec35
 10 c4c671e1-b021-051c-afe4-ba60d583d37b
 11 27eaa673-11dd-2b71-88a0-4a2eea98a2dc
 12 c567738a-fd0e-7cb6-aab7-2c798bebdf76
 13 c87224af-ae8c-27c2-af6f-2e5a685659c1
 14 05243efa-469d-803f-bd4a-92bd56778188
 15 babf4851-f075-7d85-93f4-5943e462b996
 16 e2f1b33c-e656-2cd8-a843-6bf070cc1a46
 17 408bc7df-facd-67a7-905b-8f587ded2a0f
 18 f44e244c-909c-8e63-ab3b-05f6d9ee79e1
 19 7af60217-ff70-5bac-b337-becccfe07582
 20 74f0b0a1-ba79-6954-9427-1f8e72477351
 21 d994aaf7-d681-6d94-80e9-1ec0611452cf
 22 8a9b63cf-ae50-5c68-a60e-f136070d9ce2
 23 88cfa749-c5c5-4090-8d40-5a83c60d9e36
 24 38ad2a7a-e7b2-4850-b581-6c46de1d2bf5
 25 9a0c9011-2a08-8b8a-8994-27d84fae3651
 26 8e5e42c6-a46f-4d5e-ae86-294218707843
 27 5998aad5-bc57-50bb-9673-209f70fa13ab
 28 248006eb-2e4d-3972-af18-3a8a2477db3c
 29 8dc14021-888e-1006-827c-2ec0251ddb82
 30 d3193d12-7811-5140-aa3c-decadf204bf6
 31 cbfb0ba7-70d4-2531-9291-83a83dfe6e54
 32 f4ef7b47-0eda-5c10-833f-fce29c490429
 33 58ba790a-85bb-5806-8701-9b4cdc2a3716
 34 4460ba7f-6e98-4160-a4f3-49ddf05ee91a
 35 29dcae9e-8013-8de0-b749-618d42847d18
 36 aac6e5b7-462e-643a-b2af-7db114ff8045
 37 6f1630f0-1c1c-4d5e-a86e-f92335439289
 38 6c35fff0-89aa-5dfb-aa81-e0b4eddeae8a
 39 c5bdba11-4737-5c51-9a0a-0905470abba3
 40 fd666163-360f-3295-ac04-660d41d2e771

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6087851110272872685665448453152554864553. Exactly this sequence comes out of new Random(737).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 46 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs