A858DE45F56D9BC9 archive

201307290300 1j84j6

explained decrypted filler

seed 836

Metadata

Post ID
1j84j6
Title
201307290300 → 2013-07-29 03:00 on A858's clock
Posted (UTC)
2013-07-28 18:00:58
Timezone
UTC+9 · title 03:00 against posted 18:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307290300) = 057debfb74908096398e02569053dd01 (name+title)
GUIDs
36
Filler GUID seed
new Random(836).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
116 · predicted N = 36 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307290300 (name+title). Key = MD5(password) = 057debfb74908096398e02569053dd01, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 82a69e86-df9f-4b7c-8ad3-d2c2e0fe612e
  2 795fbe0a-7e94-1c5d-8759-52d6168929cd
  3 a4c88b41-c036-1663-a36e-d7dd8e77bd81
  4 8b41ed48-aa22-8863-996e-7660fce40fc0
  5 515d1d6d-2bae-568d-a6c6-2954bde60a32
  6 a30b626e-80ea-19c3-80da-c461577c0693
  7 f0890591-2508-4cfe-9f30-120dac0eb37f
  8 f971a260-0b98-7e1a-8e3d-0a651e25c545
  9 c1825238-e607-3a75-ba60-04ac95b0a842
 10 a53d57c5-e75e-464e-b194-22322fd50695
 11 48968ca7-1e0f-137c-af06-8f7b8c7231e2
 12 e2973f4a-4a7b-16be-8376-d1d3b2e0d3d6
 13 f3f58dd0-dffe-398b-a8a7-04ef4b33a019
 14 e41e82b5-c871-3f6b-82f7-51b44743fec6
 15 4d2b9134-3a17-1444-81d9-136a544a8893
 16 a31544de-b399-1d80-9400-68f1f5d9443d
 17 e37f6f12-e15e-2eb7-a88e-b06897ce38d3
 18 c3b0b1ed-4544-27a7-b2b2-21eb6ec9154e
 19 4e777dba-01c9-2aea-b6f4-18f1dbef390c
 20 e99c9cf5-1a9a-0071-b080-23072529aee1
 21 326ab918-2979-82e9-a492-1ce92c94e8e0
 22 2118cc96-0717-840f-90a5-abdca43dd22a
 23 37f5a139-8fed-273c-813e-638537a4a08e
 24 5eb08692-b289-047c-892b-ee8ee4ea9e82
 25 ecb53783-6d21-5cae-b3d6-97d70ade94aa
 26 ee7b8100-4d17-2e2a-8035-96ba5d3f7c6f
 27 05951093-238e-669d-b677-bb8981c15e5e
 28 8451298b-f8fb-62fc-8253-6393ed49e4a1
 29 d94862a1-1084-4fb8-8b41-c8fa1c670f30
 30 5d4a16a5-0f25-369b-8478-6931f3e7e714
 31 daffe6b9-d993-736d-887c-f828e227e734
 32 263ad77f-0927-509d-8e23-941bba084589
 33 271895f3-39b7-4471-b929-22778f42a87b
 34 bbe778f2-93f1-8ad5-b6a0-90c99f0a983e
 35 a40fdf1a-3897-5a32-b2ee-4abe7feb4668
 36 769ceda9-5de8-83c4-ad20-39778dabd3bf

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 411851473411331122208820526643754858. Exactly this sequence comes out of new Random(836).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 116 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs