A858DE45F56D9BC9 archive

201307230922 1iumz7

explained decrypted filler

seed 639

Metadata

Post ID
1iumz7
Title
201307230922 → 2013-07-23 09:22 on A858's clock
Posted (UTC)
2013-07-23 00:23:00
Timezone
UTC+9 · title 09:22 against posted 00:23 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307230922) = fea79acd5c8ab45257ef38a556d7b1cd (name+title)
GUIDs
32
Filler GUID seed
new Random(639).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
71 · predicted N = 32 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307230922 (name+title). Key = MD5(password) = fea79acd5c8ab45257ef38a556d7b1cd, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 928af065-8638-5bbf-b00b-1f0cb03aebdf
  2 945b53c4-1262-2611-92e5-079865225e22
  3 94696126-f516-3355-ad4e-7d23c2b665b8
  4 ea7f03c0-33ae-8421-b216-2dc95d1eaea8
  5 c97313c5-ccd5-6ecb-b7b5-3202d62bd33b
  6 74d382c2-a1c5-84fc-a987-5068b266c4fa
  7 66539bed-81b1-136e-8072-65aba21fd4c0
  8 636b11f2-4b96-0c0e-b166-f8ea15de0ab7
  9 7c6cf69e-843e-0280-8974-27f1f2c07b47
 10 63da6724-03e2-8625-9d09-74999e9c3c4f
 11 80c973b4-b60c-0e8b-bb3e-2b71fe6949af
 12 15b6794d-7e57-37f0-8969-be8ca12efd3d
 13 556dc284-e0a8-851c-9768-57f904c0f0e5
 14 79a8400b-1853-875a-bead-5d655913dde3
 15 7aff838b-8518-2b0d-b225-3c870894fad8
 16 a26e4b36-7c66-0d52-b4cb-10adb28df7ba
 17 a04f41bd-f559-443a-b1c0-438820a22efd
 18 5a7a6b43-6f9c-129e-a0c7-5b852d7e07a5
 19 f572599a-6b94-8dee-aa17-9cd14eeacd03
 20 6ae740d1-aa2f-6fc0-9f85-3541863700a2
 21 9276a02f-4c43-6321-af6b-788429f3ca8c
 22 3e03adfb-c1bd-593a-bbae-828a06329ee6
 23 4d6434cd-6308-836f-92e3-e2fc4232d33b
 24 7fefb03d-98d0-279e-bdb9-e005e0fc4279
 25 0d9b6459-aa6f-20f6-9c46-9fc36a180fe8
 26 c8fae6a8-3185-4924-9b49-99999675b927
 27 83d1a50f-4914-2f2b-9a96-19bdbab96f01
 28 9c3363b4-559c-50a1-a8aa-3ba3befe8f9e
 29 7baf2e5f-38fc-01c9-b981-122045b0b55b
 30 bd17eda5-d5dd-612f-84b6-d90fb870e240
 31 6825a924-c0a8-0a93-8bf1-b40c98ee0af8
 32 25cf7f34-9520-67a3-b27a-1de1c0c84fae

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 52386810080388204186658224250606. Exactly this sequence comes out of new Random(639).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 71 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs