A858DE45F56D9BC9 archive

201307230946 1iuopo

explained decrypted filler

seed 683

Metadata

Post ID
1iuopo
Title
201307230946 → 2013-07-23 09:46 on A858's clock
Posted (UTC)
2013-07-23 00:47:00
Timezone
UTC+9 · title 09:46 against posted 00:47 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307230946) = 04539f296daa71fdb6d6da4f8a2dee28 (name+title)
GUIDs
32
Filler GUID seed
new Random(683).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
83 · predicted N = 32 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307230946 (name+title). Key = MD5(password) = 04539f296daa71fdb6d6da4f8a2dee28, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 21f1d33f-8187-40ba-aa03-8a3493218919
  2 d7fd462b-56b0-2ed7-892e-5f7521541cf8
  3 0bfc8372-b745-1d46-b873-7d4516ebb453
  4 60181d7d-961f-3c48-9b78-9127cd5a5799
  5 a6f97006-8e38-5145-89ed-b2bd65a436ea
  6 93746579-29c7-3118-a26d-f6856a1af05f
  7 c2da78fe-ba98-8063-b55c-11bbc532f252
  8 d6321300-c52e-0917-bd3d-75380bf7538f
  9 cbe64b38-32a4-425d-8699-2a3e3d43ed61
 10 b2457aaf-218e-1999-908d-aa728e44ee5b
 11 995dca2a-1e26-43c8-aa3a-3858baebe9aa
 12 d52a4175-264b-6253-a73c-b0ef38d29459
 13 0d4ed98d-b51d-18f3-91d2-e2aa80be4ae1
 14 43ab989d-672b-7214-a68f-4da5c9cae000
 15 e6a2cd12-3b9f-0c97-bd75-c953236c1fc5
 16 06ddac3e-7e38-5b36-aac8-2b93a8234443
 17 d8d43124-060c-870c-8651-1027ec894e13
 18 5adf701d-1d90-4058-800e-1f2518ab6b39
 19 8e0c419f-748e-16b4-9dd2-e872342229c9
 20 1cabe6d9-5c0a-673a-b200-4642b40c8659
 21 70e904f0-2882-5fde-8282-d3d27ba96489
 22 ef4bca3b-3639-304c-80fa-4994400f6416
 23 c8bf1803-26e8-33c2-980e-24e3954192ed
 24 b75e949d-338f-5e8e-acb6-763bfe8593a5
 25 9edfd425-3a48-5fa6-abaf-6c5cbc9701c0
 26 1096c0ae-8276-7016-9bd1-875cd476bebf
 27 0b957002-2dff-1afd-bb86-75c99802545b
 28 42e776a8-587b-7659-ae6c-2bd1e872b099
 29 3141d749-fed8-14e3-949c-595e8a7a6606
 30 df21a83d-2d2c-1fa0-827d-7a02d8625c5f
 31 a129969e-4679-3825-9ca1-5dea8bf34b27
 32 a29a434c-ee9d-3855-ac38-4d85bccaad67

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 42135380414617058416533557171133. Exactly this sequence comes out of new Random(683).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 83 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs