A858DE45F56D9BC9 archive

201307240908 1ix6ok

explained decrypted filler

seed 671

Metadata

Post ID
1ix6ok
Title
201307240908 → 2013-07-24 09:08 on A858's clock
Posted (UTC)
2013-07-24 00:08:59
Timezone
UTC+9 · title 09:08 against posted 00:08 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307240908) = a7bc02de244979a69cd1879a64257403 (name+title)
GUIDs
40
Filler GUID seed
new Random(671).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
93 · predicted N = 40 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307240908 (name+title). Key = MD5(password) = a7bc02de244979a69cd1879a64257403, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 da848130-2096-23cb-be98-504ea67a6693
  2 e411facc-e93f-6baa-994a-57cb54e76f65
  3 35bfe766-d355-7360-a3a1-75b8c955b965
  4 cb109f5f-8e5c-7193-bb58-9257d3728045
  5 780dd000-5858-1f23-be66-8b5ce7f23a34
  6 369f9fc2-43fb-8c38-bc35-3ea6cb8f07e2
  7 9291ffb4-9628-46bd-990f-2291b520ab17
  8 48d4c339-54db-0ef8-ad21-1419f7ade6d6
  9 4d281794-ed77-8dc8-ae3a-fadd15479ec0
 10 ab52da10-dca8-6c02-b9d3-b7b2590ac5e7
 11 020606ff-d320-5e9d-97f1-088bdfff748d
 12 377b69a0-fd7e-2b99-99d2-8a016bb31a20
 13 b0cfc31f-c1f2-8cca-b13f-d7bfb0261d1f
 14 0d926057-d3ce-5ac6-a823-2e7d782d87f3
 15 7abce07a-263e-5fe2-ba19-546aa6a575a4
 16 60ced263-3c66-0290-95e6-9b45e14bef19
 17 97046632-fb59-86f7-ab2e-81ecb6f26691
 18 8738780a-266b-0c42-b796-4e382d094c00
 19 32931b05-1f0b-77fe-9305-ba7ceadb0018
 20 d02d7667-6d59-1484-a6e5-31f1909e5276
 21 f17d2610-6dd0-8ad8-8f7f-369d9888ef86
 22 17c385ec-8b01-479c-8d94-c02709056870
 23 d3f4ec0f-e8e6-3d98-9e41-cbbb545ce119
 24 a8f4bd2c-7e42-357e-a6cc-41d05cfefe14
 25 dab11399-88f5-4f95-857d-3947ab61a1a7
 26 94ab20c0-334f-03e3-9e9b-55025c874604
 27 f89d3bb6-37ec-7748-b9ec-82a1ebbe7852
 28 0666ca35-a3a0-4360-b6e9-02aed16972d0
 29 712d1425-1b54-7595-8c1e-faa6a2be1737
 30 32617990-0fa9-4f70-9818-3295dce0ee2e
 31 3927ea51-01ee-88dd-b72e-393c5d606800
 32 8b9b4754-3bd6-1d21-813d-b5d8fad8aee3
 33 58ff148b-5d89-1cc4-90de-3377e39ce31d
 34 17f106d7-24da-7178-925f-24546cc30390
 35 42d9fd11-cf9d-8afa-86a3-6fb13062b9db
 36 0600687c-bb25-7212-8458-a9725d3f8c1a
 37 420c114a-c65e-741d-87c5-08f7c5f4c33e
 38 51c28d16-c5a4-69f6-97f2-b2cad23f8c77
 39 62394fa3-e6fa-2042-9c27-96e2fcadcbf1
 40 7953d6b0-8124-8eeb-9541-20ac774b439c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2677184086528550807184334074748117877628. Exactly this sequence comes out of new Random(671).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 93 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs