A858DE45F56D9BC9 archive

201308011200 1jgvod

explained decrypted filler

seed 808

Metadata

Post ID
1jgvod
Title
201308011200 → 2013-08-01 12:00 on A858's clock
Posted (UTC)
2013-08-01 03:00:57
Timezone
UTC+9 · title 12:00 against posted 03:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308011200) = fdff71b5c5181252a09e7183be319319 (name+title)
GUIDs
32
Filler GUID seed
new Random(808).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
143 · predicted N = 32 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
9 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308011200 (name+title). Key = MD5(password) = fdff71b5c5181252a09e7183be319319, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b2492c3f-d7cd-7225-a33b-ce405b730fdb
  2 90668d52-a0a8-8ece-8d38-ce033e08bff3
  3 62c88e1f-de36-4241-9dbc-feac8af5212c
  4 e0d9ff6d-366d-0a63-8187-f68052673ba1
  5 62c96c41-6de8-000b-96f7-6ed44307b47b
  6 65b1daa0-62cd-6964-833f-2e9f62e56e3a
  7 21648537-51b3-8ecf-8fae-7cab35c82ab4
  8 16a5f674-b60e-7b85-a95d-6aad4a2cfc4c
  9 2623434d-ba43-84cd-89fc-38c99a6d2401
 10 7fd3ed5a-175b-2a89-8e0c-b826e1fc9f3b
 11 1764997b-a6be-50be-a5c6-deb7af5e6b39
 12 6f8f3f62-14ba-2638-b964-2ad1d67522f8
 13 43fd7cd1-e768-0b9f-9c86-c43889d4ea8f
 14 efba2866-45cb-7602-89d8-45193da1a876
 15 6086f1f8-ef28-50ad-b0da-b74b02b96fab
 16 9d67601d-8952-5e86-be74-3647b9f2ef8d
 17 a8b5dfa1-18aa-4aca-bd8a-339d29cf2943
 18 cd12de5a-c56a-86ac-8fc8-6a7afaf5f48c
 19 5304dcda-5f97-4d0d-8df7-2486b7850f07
 20 d332e6e9-1f5d-1c69-9b8c-966bf07bedb5
 21 b089afa7-5e10-1286-9c20-7a797efac0c6
 22 20b6f64f-6fdd-0675-bb68-d2db30474d4f
 23 791c9ee3-5ea3-4c34-a471-b4838c761164
 24 ded94d21-4b0e-2eab-9be1-e8cb27efe49f
 25 54785233-e2a3-7e75-97bb-56db2cca5960
 26 c424518c-fad0-12de-98ab-ffa390fcaa83
 27 61119f96-acff-5fbd-8dea-bb2a1f85bbaa
 28 e4862a5d-7862-277a-b25c-a2c487a615a2
 29 e011fd5e-54e1-6adf-8d51-aa19eceb60df
 30 6d8ac153-c69c-7227-b624-52dbeacc3c94
 31 14fb835d-7182-460a-8897-ada42ebae917
 32 aa997572-2257-2587-afec-764f45446716

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 78400687825207554841104271526742. Exactly this sequence comes out of new Random(808).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 143 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs