A858DE45F56D9BC9 archive

201307272100 1j5nf6

explained decrypted filler

seed 281

Metadata

Post ID
1j5nf6
Title
201307272100 → 2013-07-27 21:00 on A858's clock
Posted (UTC)
2013-07-27 12:00:59
Timezone
UTC+9 · title 21:00 against posted 12:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307272100) = db61e2082890c58e04afa258a5c10eea (name+title)
GUIDs
36
Filler GUID seed
new Random(281).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
106 · predicted N = 36 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
15 · 6
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307272100 (name+title). Key = MD5(password) = db61e2082890c58e04afa258a5c10eea, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 6dca6a0b-ab4f-4ef2-b657-f631a0f4fbe9
  2 dff291b3-7356-26cb-ba3b-dc7899f3d0c3
  3 a7746575-2283-13fc-8ea5-9453b9720757
  4 a58f45fb-5db7-48b4-81c0-ba44b1496f08
  5 5eb17e84-8f75-0ce7-bb8d-e67538a40a73
  6 53f97ab1-b97f-1506-94ed-7efa3cf0b425
  7 13a42cdc-4e2d-7acf-90ce-e996f294b5c4
  8 c9126a6c-3ca7-36d4-91af-2f7a52e02c61
  9 33d08666-a5bd-6efd-ad9f-9b95eb954b48
 10 ed2edcb9-92b6-8a41-8e86-845a18969dd6
 11 fe8d83ae-5600-2f6f-8f2f-d99247650b79
 12 1c397c90-d2e4-7c41-8e85-c3a02be75453
 13 5bf0affd-b249-7599-8f24-e8439ab99c9e
 14 3946eca7-f46e-5c67-9698-42114d50e6f0
 15 da95f91a-3e78-6273-9651-ea6a3682a0ff
 16 0b45d193-8638-484c-8403-6bbdaf817602
 17 071fff35-e193-8481-a663-a9f63f7eb594
 18 0debe859-eb12-1e3f-8735-0501695fc0a4
 19 cadcce7d-b52f-2eef-b0a6-e3fe00aeb51d
 20 aa176a97-b0d3-1068-b729-ca73daa52ea7
 21 7bed3cf9-0daa-16c0-bf23-75fc4b081e78
 22 daae1157-74bf-7c7a-9c3e-c66309a9d898
 23 e01b9fd1-1c65-470a-b479-ec783b44e28f
 24 83e60869-9a43-1864-89f8-63b870c44d72
 25 d4137cab-459c-25a3-af33-faffdba55972
 26 811ea3cb-938d-23a5-b488-b941af0347e0
 27 b901bbd0-bc1f-41d5-a46a-1d312db251da
 28 440dd4e8-86ac-7821-ba7c-b933b49303a1
 29 a5a64b0d-147d-110c-8536-1e7b00e6bf60
 30 290fd3f0-d0d9-34e5-bcdd-5d1b1291f754
 31 79a1c305-2aa8-8ed2-9fcc-f5d41a5db0be
 32 198d9ffd-1c1c-49cf-a474-220d1e10a5d8
 33 9033a6b1-297d-2432-8325-74c9a57c9d19
 34 eb2d236b-e212-0f8a-b38c-17525a6eebe1
 35 cc04996b-74ab-65b6-bf7d-224936e3e256
 36 ff8e7a6b-d132-8840-8ade-f03f0a5268e3

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 421401736827756481211741224713842068. Exactly this sequence comes out of new Random(281).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 106 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs