A858DE45F56D9BC9 archive

201308012100 1jhljz

explained decrypted filler

seed 430

Metadata

Post ID
1jhljz
Title
201308012100 → 2013-08-01 21:00 on A858's clock
Posted (UTC)
2013-08-01 12:00:54
Timezone
UTC+9 · title 21:00 against posted 12:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308012100) = 67649df3edc07645fb748053ace8cee3 (name+title)
GUIDs
40
Filler GUID seed
new Random(430).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
146 · predicted N = 40 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308012100 (name+title). Key = MD5(password) = 67649df3edc07645fb748053ace8cee3, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 261ea06f-f6b3-3be2-8190-c52cb4dd1091
  2 bb7990da-c60b-85ec-aa13-075635151ca2
  3 564347bd-42d7-2e10-bdbc-398261b6222a
  4 1d0c78ba-11af-3811-ae57-b6740b16031d
  5 05af5094-859b-38cd-a3b4-75e7771cdf20
  6 0ec87951-ffc5-3658-9f45-0b7163ca8748
  7 5348a638-3389-59fe-869d-be96b4cdab7b
  8 a8c5f842-9275-18b6-9000-7650d8c7a6e0
  9 cd837061-f66e-1aca-97af-0cab8206cd65
 10 e0be4b82-5ee2-7056-b621-96bcf4602605
 11 2cbdef27-cd26-0335-b1fb-cd7d276668fa
 12 17a9cb0d-5d07-16e7-b010-1f1a88e7f1fc
 13 f78fe34f-a18e-2b1e-9cb4-a09e57de77df
 14 8a4acdf1-7807-1ac7-96fa-0bb3eb50e450
 15 ea575c99-911b-83ea-af84-124297323fba
 16 6b69223e-5546-59a9-807a-86fd1f34d54b
 17 ed8acc7c-2cd4-51a7-9324-af8fc455ac56
 18 c177640e-101b-5e70-bd45-2fcd055758d6
 19 82df9045-02fd-2062-916b-4bea0331543c
 20 bd89a2b6-1988-72a5-a53f-728a21af8bc7
 21 30edcfc5-62f5-819c-9017-e56c0f98ef45
 22 340a9957-bde3-3b30-8ba4-e5892615472b
 23 b0086def-ee95-57b3-a085-001bd794ff3b
 24 b6c8a4e6-ca3d-2c54-a304-de764132d6f1
 25 a4da1a50-bb4d-78ad-b7c6-f721de437849
 26 873a7352-fc90-0887-aba8-7ce2aa82d014
 27 100f795c-38ce-5a2a-9a0b-c8d08b831167
 28 c733ce1e-ef11-1c82-9937-e7cae689067d
 29 6e8889d2-6628-2b31-b5af-0dfcce727747
 30 ca80a4c6-de37-39ed-aa65-ce39deb3defb
 31 ed916e8b-c570-8590-a381-b7066817ee06
 32 07bf0c4d-b0c1-658a-b9de-d4895824877e
 33 2d1b7cca-8f7e-1eaa-b8d8-20ad5e538c27
 34 b3dd3f40-47bf-65f4-a110-a77fa402072f
 35 6fe6a938-1adc-7d1f-b221-97705d62af1f
 36 d0f2b8f9-9415-3604-9051-2fa07fe8cd6c
 37 f6b6d7b5-eb9f-1780-85f5-1176956e2e08
 38 288d8dca-4014-3498-99b5-037e5bfe0e3e
 39 6f890198-262a-896b-b1f0-06afdc58fd8d
 40 9fcfceb7-a9bc-1933-b766-2035f2d31f87

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3823335117012185552783527051238616731381. Exactly this sequence comes out of new Random(430).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 146 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs