A858DE45F56D9BC9 archive

201307281200 1j73n7

explained decrypted filler

seed 586

Metadata

Post ID
1j73n7
Title
201307281200 → 2013-07-28 12:00 on A858's clock
Posted (UTC)
2013-07-28 03:00:59
Timezone
UTC+9 · title 12:00 against posted 03:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307281200) = bc85897c24095ce8266732a2e9ad0cb5 (name+title)
GUIDs
32
Filler GUID seed
new Random(586).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
111 · predicted N = 32 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307281200 (name+title). Key = MD5(password) = bc85897c24095ce8266732a2e9ad0cb5, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a0d1ca7b-d00c-7c39-84ec-2053a7d36508
  2 6bb8a255-85ab-6e07-9655-27654dba2b8b
  3 b97f7994-d4ba-37e5-a36b-423a060867e7
  4 f496b6c9-1f84-52d6-882f-271f03a29e02
  5 8d9b2565-ad54-6fea-a4d1-686be871a3e6
  6 558472fa-2391-5325-badd-4affa60d8f0f
  7 845c2523-8503-4ad7-870e-caea2291e3fc
  8 9cb93caa-5a22-3256-94ed-1887eea1b831
  9 56a0a63f-e48c-45a7-a05f-bb1588d3dc97
 10 3872eee2-9c20-3d3d-ab22-4b78a6240565
 11 550bed9c-3c1f-01a9-a66e-e07a96537d94
 12 78cd91b0-1d5b-8c66-9978-4f080880032b
 13 237cb79f-3c17-4d88-8b3f-34ed5838b802
 14 93d03d1d-fb28-3761-be39-e78c61664f0d
 15 ca20b5a0-af9e-1c6a-8256-4e2ff98d39e7
 16 fc67e740-6f6f-8717-a7cc-d0654679006f
 17 6f09ab42-6420-1668-b1bb-cff566bda71a
 18 f5908f11-3911-2ce9-bdfb-a3d133184af0
 19 778536e1-2fd6-45da-abae-c748e4ec21c6
 20 4668ae5c-bdd0-1625-9c15-ccbd0b4a7060
 21 6bcb6329-a060-616e-a370-ef21c54dd7dc
 22 fe10c355-7f23-53c5-b485-925907cbf76b
 23 1fee8dd1-a0c9-0e99-a978-0f048a5f8717
 24 760ed003-58df-6654-a21f-02313865923a
 25 3c1c4c7a-100e-1a38-a5b2-a9acb6f6538b
 26 0096e241-57b6-30ea-8113-99d750adcf41
 27 c04ffc37-a3b7-6f73-84e5-6139c3bda2df
 28 a3596f4a-d552-78e6-8fcb-93008a5c6442
 29 95b4fb66-dc3d-3872-83c9-b0089ba9e55e
 30 6cc2d08c-20fc-09f1-88e5-d63a2f50f994
 31 c29e384b-6b3d-4feb-9da7-27649d6531ba
 32 32ff38ec-738c-7e55-9af7-8186065b7413

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 76356543430843181241650613673047. Exactly this sequence comes out of new Random(586).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 111 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs