A858DE45F56D9BC9 archive

201308020600 1jiqyz

explained decrypted filler

seed 932

Metadata

Post ID
1jiqyz
Title
201308020600 → 2013-08-02 06:00 on A858's clock
Posted (UTC)
2013-08-01 21:00:53
Timezone
UTC+9 · title 06:00 against posted 21:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308020600) = a0709f2e8d79715aa67c52721a1a68b3 (name+title)
GUIDs
36
Filler GUID seed
new Random(932).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
149 · predicted N = 36 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
19 · 5
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308020600 (name+title). Key = MD5(password) = a0709f2e8d79715aa67c52721a1a68b3, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a327953d-41ae-5822-bda9-484b364a4e78
  2 c3496db0-7092-2af1-825b-38b9c9d411bf
  3 1752112f-9dfd-2d42-a29c-b12ce13de275
  4 10eff527-ee49-4fd5-b492-62dc25d77c4c
  5 1ae40467-6708-8edc-9e81-4a3ed238333f
  6 ee3acc19-017a-0270-a2a2-cd15490972e4
  7 6835e262-0d0d-43b5-bc69-6a2c4f27e499
  8 5962f5cf-e587-0d40-811e-f56c0edf9c1f
  9 b992078c-4613-2ba5-a916-878785c4a2a7
 10 e0875e1c-ba75-8e68-bd73-de73f53d7fe4
 11 826ea208-dd46-8fed-afd6-0b2f0e7ac8a0
 12 eb32b56d-287c-0409-9b9b-e48f689ac956
 13 d3094ee2-4a0a-3a13-a3aa-e751c9ee28c5
 14 bb8c5ebe-1c25-3c72-98ee-c6fb64d2ace6
 15 1f8b5c76-f9ad-3b94-b099-3efda447e912
 16 088304e1-b693-0a0b-b75e-b682c9c7267f
 17 e542bc9f-e143-5d78-adb0-af9eb8777871
 18 58923bd1-4c28-7e1f-a844-7c868a1573a4
 19 0022844d-6aa4-80b2-b480-d69dd5b4695d
 20 1862d2c3-412c-1bf0-9872-ada594518306
 21 cf0bcb94-98d2-509a-8423-08dfcabf7812
 22 9756b800-103e-4e95-8b98-531dd7ddc80f
 23 2911c6d2-450c-494b-aad3-c875d63ac26b
 24 f5750db5-e8a7-569d-aa11-1d764b61f70d
 25 5c509ebb-b887-0c95-8f77-89949989cd6a
 26 c5d91a6f-499f-84b0-87b0-2b71c10b0af1
 27 2eedd7e2-ef5b-2ee1-b916-28300a677b99
 28 250ea619-5dc2-129f-9bf8-2eeb2a8e5762
 29 82c5bccd-54b8-8740-b8b6-86d55b6d0b26
 30 0d6b40c9-7802-6a59-bba8-9162c6319acf
 31 5e25d58a-b754-2e2d-b45d-49d434d56a34
 32 be06a672-d395-887a-96ed-f239481480e6
 33 0df3d917-cc7f-0e81-9a86-355121074ee1
 34 c6a3be06-f1e1-3e75-849c-83a1224a27c8
 35 32d9b8ab-3e27-08b8-9185-bd14f7607997
 36 16d06e2c-741b-100c-9880-4ece54aa4df1

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 522480402880333057815445082186280301. Exactly this sequence comes out of new Random(932).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 149 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs