A858DE45F56D9BC9 archive

201308010600 1jg48v

explained decrypted filler

seed 108

Metadata

Post ID
1jg48v
Title
201308010600 → 2013-08-01 06:00 on A858's clock
Posted (UTC)
2013-07-31 21:00:54
Timezone
UTC+9 · title 06:00 against posted 21:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308010600) = b4697a29e7aebd2c71e3ad58c7037881 (name+title)
GUIDs
40
Filler GUID seed
new Random(108).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
141 · predicted N = 40 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 2
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308010600 (name+title). Key = MD5(password) = b4697a29e7aebd2c71e3ad58c7037881, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ddfa881d-2ea4-13da-b2bc-71ccac16fc0a
  2 114cf789-586c-4c8d-aad1-25806010be7a
  3 28244db7-a26e-291a-ab5b-650f3f930052
  4 5b0052f9-8329-56ab-b903-6c25f0b39de9
  5 d7de09f2-da8d-8818-9025-5c0e4006d381
  6 7572e420-0a33-87ad-8114-b1f157e9ff72
  7 329ebd91-2c95-257d-95a0-8de162379d56
  8 b0cdb8aa-8cdb-54e3-a7d1-1e8285df8b68
  9 3081cdfc-2020-3b82-a6f2-96a92242d891
 10 53b12df2-dae5-0e8e-bfc9-7c0b15422ddb
 11 9fd5c5f6-509c-79d0-b081-ae4401de4d00
 12 65dd0447-e9f9-7b1d-bf14-2e5033442dfe
 13 bccdceba-da73-782b-bcef-57639520f162
 14 be8e9412-089d-511c-ba51-18cc91425521
 15 485e0dcc-cd84-5a7d-904d-d33a3c50d237
 16 dfb0d070-ff82-4b51-b356-c92bd6fc3a90
 17 89178dbc-8a41-21e2-b7af-8adba60fdc61
 18 d3fc012f-95c6-85b4-b580-b9486d2def7d
 19 c9e5dd91-3bc7-5cd7-a5ed-1bf20c763aec
 20 c34f747c-ca2c-1e33-8a93-5dc9931c584b
 21 c6311ca3-213b-1977-92bc-5e008e98ecbd
 22 101649bd-81c7-392b-9d26-125bfbdc55e6
 23 60fcb04c-a976-2772-93f6-0766dfb2144f
 24 0563f5bf-7b01-6ed7-85df-260b1864b575
 25 850da7dc-0494-2ba6-ba28-0e146255cafa
 26 1cfa763d-4b38-8f24-b34e-9a56cf1888a9
 27 b80d627d-f924-7a40-b10a-9cde0ed5c92c
 28 397ad748-24ee-5f7c-8564-7611724d7640
 29 aeb3e714-c9e1-367a-bbd9-1bd68d9d107c
 30 4b4bb840-83fd-0e43-bf48-f9ebc62655e3
 31 56adb34a-ac89-00da-8fb4-95f296198a60
 32 00cde479-2ddf-8d6c-bde8-d35ab76be541
 33 418d7809-5ac7-6483-bd99-9f3d75ba1a28
 34 13c6e3ac-eccf-6675-ad8c-ee421d86cf02
 35 a44525c9-44a4-3ef3-a86b-e34c90bfadf5
 36 8fe22766-1dcb-3207-8ade-bb7d56bd4b49
 37 3fdd8742-9c40-4d04-b4ed-dc277e5c63ab
 38 d9ab1db3-19da-8fd8-a2f4-d685c14d3f54
 39 d845dfdc-26fc-71fb-a3dc-16fe3ffd6174
 40 5be834a0-b3f5-22f7-8727-916cf07b6195

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1425882530777554285113262875300866334872. Exactly this sequence comes out of new Random(108).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 141 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs