A858DE45F56D9BC9 archive

201307250902 1izrh3

explained decrypted filler

seed 712

Metadata

Post ID
1izrh3
Title
201307250902 → 2013-07-25 09:02 on A858's clock
Posted (UTC)
2013-07-25 00:03:00
Timezone
UTC+9 · title 09:02 against posted 00:03 UTC
Author
A858DE45F56D9BC9
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307250902) = 5afabca8fb5214a30ccf077ebd85f6a0 (name+title)
GUIDs
40
Filler GUID seed
new Random(712).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
98 · predicted N = 40 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307250902 (name+title). Key = MD5(password) = 5afabca8fb5214a30ccf077ebd85f6a0, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 89fe2b54-de69-6a45-9097-b326a91f7e18
  2 a503a193-1473-6bc4-b73d-8de4d68260cd
  3 02098494-28b0-441e-9b5b-6f1e74ee0b39
  4 db95b74b-43aa-4ffa-93a8-86b2fb5bcdb5
  5 cc20d348-2758-5f71-9eb7-3e0fa0a97574
  6 8a34d186-bb03-608c-b099-6b4180323186
  7 df98dec6-f26d-8c2d-8875-b29b74ef501a
  8 af1d1195-0782-5b6c-b261-6fcfeb3749e8
  9 895ad830-15a4-055b-be33-dcae08114079
 10 86c0bb08-bed8-7875-8dd1-e00e9709708f
 11 ff80c24c-2e48-7b38-bf01-471cea2350e0
 12 3b44f79c-3edc-3c92-89dd-4b1913bee840
 13 4b483b39-989f-0b84-9115-cbe8cfeb692a
 14 918076a5-6458-8654-9844-307e98c29236
 15 48fe9593-96e0-352d-947b-f74285a5b7b8
 16 95602217-922e-619d-ad9f-1faa5843e2ab
 17 d0bf6fd0-d25b-1110-8b3d-b966d09855ad
 18 4917689c-2263-353f-9f96-566d4335b3eb
 19 165639c5-ae9c-87fe-8071-0a8b9d08f207
 20 9ee00627-62c2-0ce9-b4c2-3879c26bce61
 21 58a19d54-bda0-32de-8eb5-0b82bb1b9fe3
 22 17eaa7d0-42c1-4c59-a175-f41d44bc85a3
 23 3c82bbcd-cf63-2191-8072-969ddbfbbfc4
 24 abf091d8-b93f-6a87-894e-9450215fab46
 25 c6a0b92a-f0c9-4ad5-a089-8d9106d2265b
 26 f03ab494-e546-4ed5-baae-9329a9940f62
 27 9ddfae3b-8e67-0797-ba19-ed2be0bdcdd9
 28 71045fff-39dd-75c9-981b-b471e47bea97
 29 4cddb180-b5a1-1416-842c-5654b841ecc2
 30 8024c3ef-2c9e-47ad-a95f-6df4521e9bf9
 31 312d82e6-f94a-03a1-bc81-6e78b652d066
 32 8d371404-ded4-811d-8a49-91ad2c5975d8
 33 9671cdea-855a-51c8-af0e-b368a96852ce
 34 7e53be35-88c6-76b6-a07e-36fdbbfdddcf
 35 7d2e3a7d-2bd1-2f3a-a616-524cfb815a80
 36 8d1b2b79-d4bb-500a-a291-326eb897cff4
 37 e6f8f9de-13fd-7455-8eb1-9abe216be466
 38 6603372e-36b8-5823-8117-26b12629216a
 39 4485335e-c4c0-2903-a086-a1350d9960ce
 40 6bc7a134-8a4e-2bcd-a9ed-e67db0d41086

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6644568507730836138034264407140857257522. Exactly this sequence comes out of new Random(712).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 98 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs