A858DE45F56D9BC9 archive

201308020000 1jhwu7

explained decrypted filler

seed 280

Metadata

Post ID
1jhwu7
Title
201308020000 → 2013-08-02 00:00 on A858's clock
Posted (UTC)
2013-08-01 15:00:53
Timezone
UTC+9 · title 00:00 against posted 15:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308020000) = e5904efac8c9cf850ad66815551fd14b (name+title)
GUIDs
36
Filler GUID seed
new Random(280).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
147 · predicted N = 36 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308020000 (name+title). Key = MD5(password) = e5904efac8c9cf850ad66815551fd14b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c21ff89f-106c-0f42-a96a-d7df20b45eb9
  2 857b79ca-5840-8836-b5eb-9cc789790b7b
  3 75e055c1-0315-48d4-8078-d6ba735804ad
  4 89d0ff06-6952-2d07-a2d0-088dbf6e6bed
  5 df5b955f-e6f3-5bc8-a1ec-f2668f2677a9
  6 cace7dc8-9495-2207-8cd5-704252ef314f
  7 cec2fc45-74e4-333b-932b-fa4344dfdb39
  8 1a0bba93-7e99-8371-897c-b3eb4cceb5f8
  9 b9ce2c18-3b52-58fc-9605-5b229adc0d39
 10 85dd4454-3a06-4afe-bc16-69d7aeff1395
 11 465ef1d8-210f-58cb-9942-5d2093ec9659
 12 a889b7b4-a4a1-09f1-ab89-0d5ad87068a0
 13 152e1521-d5e6-19ed-a490-bc094dce9548
 14 e392b13b-1cc3-1b73-9665-78a0b955961f
 15 36683cc1-5986-8a4b-8d1c-f9c793bb69cc
 16 812275f7-75e4-86f2-85a6-ca93bcb319d2
 17 db705eb8-44b5-5db9-9f68-2338fc80724f
 18 743b2a75-94d0-5ec4-ace9-9b8feaab7eb2
 19 bf74cb6a-0a7e-2467-ad46-13009d087e43
 20 663c9481-8544-6608-a6e7-2ee62282862a
 21 5eaf9428-0d9e-00b2-982e-f74276f990bf
 22 8fe40d2c-f5e7-48f3-b321-d329ea331782
 23 09e9a522-d45a-2a25-905b-27cd625c1697
 24 fbd01d59-8ebf-7432-b78c-f83f6760213c
 25 46e632c2-82e4-1617-81ae-70d09b40a7c8
 26 d6e0a2b7-fa7c-55c5-bd90-f59426a767c2
 27 07994a6c-5ada-6897-8d24-388c5eb38e0b
 28 b9ef1d93-cc52-14fb-a8ea-6504ad66340c
 29 673c16e1-fca6-714c-bd20-d4cb8a547490
 30 4ec913d2-e77f-57fb-bc89-d00e9459c888
 31 65643722-70ab-5b88-8aeb-404bb316b86f
 32 6abf9f42-1b7d-15f9-9fb7-4edf37e374cc
 33 62cdd486-1526-8226-833c-fa0f70833313
 34 f9f97ca5-f238-0996-9c4c-0c4d32755359
 35 c6d9b442-4919-3eca-89b9-5563d62f9aef
 36 0ba39f36-df47-8818-bd7f-c3dd5d9af018

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 084252385450118855260427156175518038. Exactly this sequence comes out of new Random(280).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 147 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs