A858DE45F56D9BC9 archive

201307260901 1j2b3x

explained decrypted filler

seed 22

Metadata

Post ID
1j2b3x
Title
201307260901 → 2013-07-26 09:01 on A858's clock
Posted (UTC)
2013-07-26 00:01:00
Timezone
UTC+9 · title 09:01 against posted 00:01 UTC
Author
A858DE45F56D9BC9
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307260901) = 54b7a6d2cc55bf243931e3ec707262d8 (name+title)
GUIDs
32
Filler GUID seed
new Random(22).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
100 · predicted N = 32 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307260901 (name+title). Key = MD5(password) = 54b7a6d2cc55bf243931e3ec707262d8, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3a5c5f75-f8f2-10b4-abb4-87d839119e3a
  2 c3c8c794-eba6-2b79-9f90-e60209e12961
  3 14ba6c46-3b7f-17b5-bc64-7df0e6c5acba
  4 1171f2c1-3bff-2bbc-82bb-23bc72a5ff0d
  5 6ce100bd-9c66-18df-b368-cb92eb2d6034
  6 c067b76d-0da0-775f-b472-042587f5d818
  7 326fb1eb-f3b2-68c0-81e3-500ae6d8ce96
  8 4a1d3e23-7321-4af9-8e4f-638470c812d4
  9 0d940389-5b4d-6aae-aac8-6c3c364b063c
 10 578c842e-31bb-3773-a4ea-f749dd52d8a4
 11 6bdba5d5-932a-442d-813e-ad803b89ac63
 12 161cc546-d012-5bd0-9c61-61c58947b152
 13 b58229b8-4b12-60ea-adb1-da772599613c
 14 d6f6fe69-9fee-8883-9713-ec7616ddbe08
 15 196d172f-642e-302a-9be4-ff72548e5630
 16 ff09099a-5cab-6e2f-a3c3-5f934c852d4c
 17 348d2ffe-e1b2-08d9-b74e-693623ae7d26
 18 9a257ccb-77b0-52ac-84e0-47139aaddd9c
 19 76631902-527d-2c92-ae25-b151c9fbb869
 20 dbd1a1e5-aed4-76b6-a730-000a892ec575
 21 6f230cef-4c0d-643c-ac15-604de01787e9
 22 07a050e1-a45c-2f72-9283-812214d60464
 23 cba1e1fe-91c1-6d9f-973f-df7abf3c9af1
 24 d498c605-e3d5-6a33-ab00-2319bd01c3f6
 25 e766e3f5-b042-72b8-ace2-26675b1a27cc
 26 da00a88e-0846-6cad-9211-1601e2282695
 27 d28e80e3-2ff5-7506-9cf2-f1c37d47986d
 28 6bd9783c-2cfd-25ff-ba94-4da429091203
 29 03507551-e128-5f86-ba7a-bc28a176c7b2
 30 b15b3767-eb0b-7e1a-a501-d3b85f041e23
 31 9ac29dc7-c4e5-2023-9bc1-2d926349ef32
 32 121e3b5e-376f-2e28-9461-b66fea4bcde3

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 12121764634568360527626676725722. Exactly this sequence comes out of new Random(22).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 100 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs