A858DE45F56D9BC9 archive

201307230930 1iunkb

explained decrypted filler

seed 678

Metadata

Post ID
1iunkb
Title
201307230930 → 2013-07-23 09:30 on A858's clock
Posted (UTC)
2013-07-23 00:31:00
Timezone
UTC+9 · title 09:30 against posted 00:31 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307230930) = 0352f7fe9102c050ad47d87b783a8e89 (name+title)
GUIDs
40
Filler GUID seed
new Random(678).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
75 · predicted N = 40 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307230930 (name+title). Key = MD5(password) = 0352f7fe9102c050ad47d87b783a8e89, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 28f3c4b0-7c90-8f9f-84e1-4d10f0881038
  2 96176943-7e64-6e55-8d6b-5f7624512fa7
  3 c259fd97-1fb1-68d9-bb4c-a08ca1c2a1ec
  4 5968ed7d-9937-2f46-9028-f4a02612d19d
  5 f0ebbef3-f07c-255f-a7b8-5d9724cb01de
  6 b1e01d61-c00f-0dcc-9f8a-d488771da595
  7 30cbfb9f-65b2-6f95-bb27-fb29636b716b
  8 593ab493-1cba-5072-af37-aca7b1ac5241
  9 660d991f-3b00-7c00-9b56-fe4137f4a6a9
 10 defa796d-439c-2079-8ba6-e1ca7aa05344
 11 eee4c13b-4403-713f-8619-0d3dc530b006
 12 1bd7f8c6-945a-723d-9462-2dfa39ed73a2
 13 e8366c16-14b1-67a8-9700-8ef89b00e5c5
 14 f571243c-4655-14c7-a031-fff3690c808a
 15 d1d4c03c-8591-5e4e-9276-44f82ee61544
 16 985770bc-7f8e-4006-b848-a68defee80e7
 17 fd0d7ef3-58ac-79be-aaed-0f4a55f77e12
 18 1c315d59-7d08-392f-99bf-cb65ba37e77b
 19 6a2f4fa4-4b03-00f5-8846-8da02d8063af
 20 4222d1a2-3573-79fc-b68b-9ae8c7e213f8
 21 cc59eaa3-c2dc-8233-b614-9548fab46c71
 22 945009a3-b1b9-1550-a8cc-ce4155f775fa
 23 15de9b89-bccf-505e-9d08-d53a435016ce
 24 977d5fa9-f0a8-8ff8-8cda-00d8b2751fd8
 25 f19d3631-e06b-1bda-be98-d8f109d088a6
 26 cefa0700-3ab4-594f-965f-24201db902c2
 27 64c69e7f-86a1-7553-b9aa-0c54759bc0a3
 28 b61adca5-c9e4-7637-9774-fae3a9e4bf92
 29 ee38c0f4-38a7-786e-8902-9484b30a1e63
 30 139dba40-4bb2-13c6-872a-5f6b54e80511
 31 91cdb4da-b639-4319-9bc0-e38ec79ac432
 32 0305fff8-ff61-0f61-8fd0-46165589bec5
 33 61e25c16-8634-8029-a7b2-f34521abfa7e
 34 98375dec-a45c-8712-86a2-b3c6e85f97ef
 35 91d876ac-d134-37fa-8531-5fb693ca6a14
 36 063d81f8-8017-1636-9f4a-5bd0ca812ec5
 37 621d0e34-dcdf-5b01-87be-dbfa2076e4ab
 38 f4b50a9b-03bb-3bcb-94e8-b82572f124b0
 39 1460baba-7f76-4dfc-8624-862b8bf55a41
 40 42528490-490d-8dd7-9645-ff4ad358ae0a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8662206572776154730781581577714088315348. Exactly this sequence comes out of new Random(678).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 75 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs