A858DE45F56D9BC9 archive

201307310300 1jd2up

explained decrypted filler

seed 463

Metadata

Post ID
1jd2up
Title
201307310300 → 2013-07-31 03:00 on A858's clock
Posted (UTC)
2013-07-30 18:00:55
Timezone
UTC+9 · title 03:00 against posted 18:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307310300) = a9f4a8887e68df728052c4c7ba001468 (name+title)
GUIDs
36
Filler GUID seed
new Random(463).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
132 · predicted N = 36 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307310300 (name+title). Key = MD5(password) = a9f4a8887e68df728052c4c7ba001468, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 edfe1886-60c8-5573-8e70-d500d4b39e3e
  2 7d167f69-e6a1-6959-b59d-0cafa0a75b2a
  3 e92773be-51f2-3184-9547-8bed6e6fb0e5
  4 b894770f-ac20-35fd-8b33-73acf2e1620d
  5 453e07ec-d055-29aa-a14a-19dcf9f178c8
  6 8dbf1f7f-3b12-1d5e-a0bb-e6dab341aca9
  7 737a469b-96dc-3bba-a9d6-0f7c4a4989f5
  8 d2bfd96a-87a8-671d-ad30-83e8ce85b0ed
  9 fdbb9d33-9c0b-2696-98a1-c9253dc6359b
 10 82d7c886-2d6d-08f1-90d6-6aedcc21eb7f
 11 87416c4c-833f-3970-9ddd-ea38fb0517f7
 12 b422de05-29e2-8035-b252-94feea868e9e
 13 a7770247-5420-8452-bb36-0c5b58181554
 14 65c6a9d3-8dbb-3e01-a37d-86ccc38259c2
 15 3189cb39-4e66-0527-bc54-6320de9098bb
 16 77479029-e6d4-150b-a431-05c286ecf494
 17 160f7318-ce01-4b41-90c5-8334c0ff9708
 18 f6b38bc0-ad7e-02b0-a791-832d27d2e289
 19 b3e84c16-9d93-1c84-bd43-4afb15cec101
 20 0a047ce1-cf3b-58b7-a6a6-06faf78f286b
 21 7323e66c-8a8f-3a45-bc75-9e789c9678a6
 22 bad59007-1c39-38bb-938a-4c456580e28e
 23 4f2131fc-5e46-2710-9630-62a2b92632dc
 24 9bcf1077-9171-7a10-9bf3-866499986511
 25 9be62856-5bc8-067d-81d7-c1061cb7eb9a
 26 e1d681bd-89b2-2ee1-9a75-5dbc6cdcd037
 27 9d2b4f59-4ec9-0734-b354-6856a1e05333
 28 8e933219-a532-5006-8352-fe2131758800
 29 9f4da663-bb5b-39c0-b6e6-5536c68b2625
 30 1bb62e92-fc54-8332-be59-5ecba5c87758
 31 cb3f1e74-0945-1c0b-848e-8e53aa962a1a
 32 62043615-ead3-3b28-8800-835584a204d7
 33 ec7453ef-47ef-466b-9dac-02c5529975e5
 34 5cd27a88-bf71-5578-93aa-8c3902b866f8
 35 c9084592-3b06-223e-ae51-645c24902742
 36 4e6d70a8-7742-75b9-83a3-7f5ae26e65f2

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 563321362038830140153327020538134527. Exactly this sequence comes out of new Random(463).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 132 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs