A858DE45F56D9BC9 archive

201307271500 1j5byu

explained decrypted filler

seed 556

Metadata

Post ID
1j5byu
Title
201307271500 → 2013-07-27 15:00 on A858's clock
Posted (UTC)
2013-07-27 06:00:59
Timezone
UTC+9 · title 15:00 against posted 06:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307271500) = af6a90588cefab5bf23131f4167f27d2 (name+title)
GUIDs
36
Filler GUID seed
new Random(556).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
104 · predicted N = 36 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
16 · 4
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307271500 (name+title). Key = MD5(password) = af6a90588cefab5bf23131f4167f27d2, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c3e7ec14-f99f-1179-8935-23610bd62e5d
  2 cf0021f4-898a-8e63-b342-b6995bed91a4
  3 527b2625-e6b0-3c95-af88-e46290434c92
  4 0e7a3879-00ce-2a70-9217-a8a5a5c840a6
  5 d2d69d8d-5839-25ae-9d39-4ba2421b4f8b
  6 8d33242f-605a-419b-aa53-7a327c6b2b6e
  7 bbd9fba4-0c7f-0c97-a2c9-8b8f214c92a1
  8 8b87ed87-272a-35c6-9cef-b88731986b86
  9 f0aca40c-0704-68ea-9ce8-cef20447a6fd
 10 a4ebff6d-2570-241b-97fa-b1b24cbb7c33
 11 1e68c994-c32a-80e3-82b1-488c0184211c
 12 753a2878-e8ec-418b-8f8a-9d055ba731e9
 13 4d25d9b6-9c5e-7e96-aebd-3bedcf804601
 14 3a36a735-a9fd-608a-b352-ea8f41e99295
 15 fdd4d6f5-bae9-1175-b1ae-09213efb4098
 16 c011001f-1c34-2fb7-9795-e49897378f00
 17 3705e311-5de4-5512-a954-dcda13c5757e
 18 163b0747-dc36-6d6a-90bf-752082d2def1
 19 ff671fed-2cff-62d8-8af6-a345e056d637
 20 6b31484c-a22f-5a79-b9bd-ae9653f7ecb1
 21 d544721a-fc42-61e8-b9a5-50ab65e4fed9
 22 377fafc2-060d-2d2e-8b3b-80610a5bd04d
 23 3f5c7dac-256e-811b-89a4-fd7862517090
 24 5af5a634-6e20-23ca-a351-84af92907d11
 25 d1e26e24-cd1c-18a6-9bbb-169257141978
 26 b71cfd60-fab1-13b6-9ac5-f78f832fffb6
 27 219fd60b-7c4f-8571-821f-fef7bdef9485
 28 a6ee211c-ab69-18f7-949d-e938c5fa0388
 29 97eb22c8-d49c-1d5d-a086-cdbc25de90a5
 30 37d62492-8350-7496-a920-a1cc28c694d5
 31 77d425b6-bb0b-4561-801e-945fc71ed3ac
 32 c7de630a-def9-8be3-abb9-a1a2324efac7
 33 a95997c0-8d14-7a73-96f3-29edc00bff61
 34 6a55f9f9-3e1f-8c31-bf69-757de2774d70
 35 0cc6739d-4ca5-784e-93f5-e8bc69efa638
 36 6c03dce7-3ed0-7bb0-bfe9-fdab0ab85c40

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 183224036284761256656282118117487877. Exactly this sequence comes out of new Random(556).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 104 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs