A858DE45F56D9BC9 archive

201307310600 1jdidz

explained decrypted filler

seed 355

Metadata

Post ID
1jdidz
Title
201307310600 → 2013-07-31 06:00 on A858's clock
Posted (UTC)
2013-07-30 21:00:55
Timezone
UTC+9 · title 06:00 against posted 21:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307310600) = 68505f2e0d0009c8feb5667d63a26bc2 (name+title)
GUIDs
36
Filler GUID seed
new Random(355).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
133 · predicted N = 36 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 5
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307310600 (name+title). Key = MD5(password) = 68505f2e0d0009c8feb5667d63a26bc2, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 7f48e320-2102-127d-99e6-4c31acf04f0e
  2 071cb5fd-8a46-844b-a76c-d259c30e0907
  3 783ac80b-1672-80ed-bf3c-01375aa7638f
  4 bfdde3ad-eb45-2dcd-9dbd-d6ac9c7ba898
  5 7fb1d871-e69b-4109-9498-b02648bc65f7
  6 aa419d1b-672b-749f-aafb-f484c2260fef
  7 3604cd11-55c9-8e1e-9fa6-ecb139144897
  8 532c08cc-b5f4-489a-9d03-3e96881d7154
  9 2fdf349c-c4ed-8cb1-8d04-1b6df4d794ad
 10 c372e4bf-4daf-15d3-a7a6-2fdc9d0297bc
 11 65e75f37-0585-782a-92d7-2c9b4fd7efee
 12 e0a2fed4-e115-56f3-92ff-1a8d8e7340b6
 13 19424f2a-c44b-69f3-915a-b539c3adc07f
 14 fba13ff3-e414-1171-831e-fb4b0e675e00
 15 3445be5c-2cdd-4819-bdb3-42efc7cfc460
 16 78628392-29ca-6f2a-994b-ba88d59fdc38
 17 6b591e54-0390-0da7-9f4c-920bcbe8ef82
 18 c746d819-9d7c-0407-9e18-da63dc48c47c
 19 d3d40f5e-fe7a-2ac8-a068-95f05856d995
 20 2cf0cd44-f9c0-6cb7-a086-2ebf1a99d8f9
 21 45b7ed62-fd83-85d1-8c55-f5a5525a666c
 22 b1a9f34f-6ff2-82ff-a03c-b2f6f1a08874
 23 99528ab8-73d9-8aba-b554-3acbd3fa217f
 24 8c4a9315-fa75-0b8f-8b8e-0fb86fd837b3
 25 a8d02d92-2b0c-4715-a4a9-63b4be1ce6fd
 26 37862e30-f24e-7e49-bcfc-199accd59e93
 27 bef50d84-5452-1cf6-a615-a97d79d4c2c4
 28 4c37588e-db43-5fa4-bfb8-abba3b3d850c
 29 4d18295b-b65d-5c43-9a4a-9e869c78a27a
 30 30c25bf9-be89-89f8-92c3-709aece3bdbb
 31 ec2adce4-b234-25e9-91f5-c719e1a28cba
 32 97027b18-d63c-8d48-b399-ef7963fd3419
 33 b2338d6d-58e8-022f-a060-862abe46ae12
 34 fe3c49fa-d4e9-7f97-b471-11b14f1f75a6
 35 dbd32c64-7b62-586e-b712-06f324e2e06d
 36 d01c7089-5c61-15d4-a5e5-be4d16814751

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 188247848175614600268880471558280751. Exactly this sequence comes out of new Random(355).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 133 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs