A858DE45F56D9BC9 archive

201308010900 1jgipg

explained decrypted filler

seed 968

Metadata

Post ID
1jgipg
Title
201308010900 → 2013-08-01 09:00 on A858's clock
Posted (UTC)
2013-08-01 00:00:54
Timezone
UTC+9 · title 09:00 against posted 00:00 UTC
Author
A858DE45F56D9BC9
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308010900) = fdbe1c0b18f0a4d7fbccc5ed91b3dc0d (name+title)
GUIDs
40
Filler GUID seed
new Random(968).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
142 · predicted N = 40 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308010900 (name+title). Key = MD5(password) = fdbe1c0b18f0a4d7fbccc5ed91b3dc0d, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 80808c8e-7238-302c-b119-7414f0910ce8
  2 08331452-31a3-76f8-81d1-cf22e01fd0db
  3 032d8946-8346-3ff0-ba0d-61862760cfd5
  4 d6e14df2-f755-1705-8a09-6236605c74c8
  5 b16b5447-d421-2803-99c9-c96d35772f41
  6 a2e9bc9d-e8df-41da-bce9-2c3c96fadfdf
  7 ccfe5d68-1af9-5c14-8f6c-39705803b825
  8 25096977-f7cd-0273-8268-36c2bdcf8eca
  9 48995e32-4d04-6e53-a973-efb5cb0f8fb7
 10 9ccf8f3c-633e-2674-b089-c5129b4aee90
 11 0794a28e-d9a0-4eba-a71f-313fe043992b
 12 b22f7b4f-8bee-11e7-82ed-ebe3b81c3d73
 13 66236b89-0a76-062e-b2af-b567e487ec3c
 14 c5ff680b-d4f6-084a-8a65-c520d1d04824
 15 02fc5d55-3727-46a5-b4e9-309ece8ed976
 16 89537ee1-40a1-50cf-9016-f4cb45ab8897
 17 88fb050a-d65d-6b76-867c-55a5a49dd995
 18 aa7b1fb4-ac4f-147d-bf58-9885ffb9b527
 19 f24cb68d-e1d8-79f0-a6f0-66041980baaa
 20 33a3a7b8-35e8-13ce-927c-b42c5c721377
 21 3dd33f1b-69bd-32a4-b099-8813366ab0b3
 22 a1fa7a4a-9243-3fbc-839a-8990f6dcafbb
 23 9be1638a-f89f-58d9-8308-bb0da1ed1930
 24 07a02f35-93d0-1bdf-82bc-680a8e56779d
 25 0f45316c-c7a1-500d-bef3-2fd9ef347e79
 26 4335a991-9734-124c-b9a4-b5293e0e4d97
 27 142cfcae-c51e-1e76-8f53-3d260b57698b
 28 57cdea7f-edae-49b8-9183-5c50d79d5ae9
 29 c2641ea5-9a78-8200-929d-deff5e1cc3b8
 30 56e9f48e-8a59-69c8-ac69-8fa3cae8b99d
 31 fee4faf9-66a8-424e-86e0-acc5939ea25d
 32 ff37e7c9-0b0b-3480-a29d-d2f3c1ad9006
 33 19a4990d-3465-4062-8f7d-fa1b0141788e
 34 dbf6757f-58b3-2985-824e-e14b2ae45de4
 35 f5dadd71-adbf-57b9-ae2a-4622d88ced5f
 36 654823ee-527b-62b3-8134-3df7111884f8
 37 a8fc7c81-e94d-78e2-9738-990482deca0c
 38 b7524676-7d4a-00d6-9c63-9f8d85387b72
 39 b72cce00-1027-1cff-942b-76fc8c2ab243
 40 41699d3e-0bdb-573b-a5fa-4cd52796ae47

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3731245062410045617133515114864342567015. Exactly this sequence comes out of new Random(968).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 142 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs