A858DE45F56D9BC9 archive

201308062106 1jtqqn

explained decrypted filler

seed 46

Metadata

Post ID
1jtqqn
Title
201308062106 → 2013-08-06 21:06 on A858's clock
Posted (UTC)
2013-08-06 18:06:59
Timezone
UTC+3 · title 21:06 against posted 18:06 UTC
Author
A858DE45F56D9BC9
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308062106) = 9c1cd30092ab5cb5065c4e2fbd116a2f (name+title)
GUIDs
32
Filler GUID seed
new Random(46).Next(9) ✓ verified
Run
Run 50 (seed 2,278,890) (seed)
Draw
7 · predicted N = 32 ✓
Machine boot
2013-08-05 20:29–23:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308062106 (name+title). Key = MD5(password) = 9c1cd30092ab5cb5065c4e2fbd116a2f, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e2ec6f9a-78df-69b8-ba15-81025f62f00c
  2 8d1f8d4c-7128-22f0-83d9-74216e1cca31
  3 ce5cd306-90ef-85eb-8cbd-216b8a70ef30
  4 1529d2fe-14ab-3585-b2d7-981b5e6e505a
  5 4fad8ce6-f0b0-8947-a2a9-b36fb81535ee
  6 5d8bee72-7b63-68cd-9ff0-1e8902a9a7c5
  7 8d0cfd03-0e66-47e8-a4e4-bee75c15ef4f
  8 69a6f9fc-8bb2-43ad-8946-8a77cc496ca7
  9 f13d1c55-e8cf-6285-b0d5-260a127bc011
 10 10704108-7924-27a1-86ec-bef90673d93c
 11 824cca73-86db-13b1-9593-82026624bfdb
 12 b1d4fe04-fe8a-3699-9800-ad638391bd87
 13 1b572dbb-5d8c-2aa5-b0ae-7c672f356e65
 14 3fd66a5d-2a65-3f5d-b0f9-44d2fc5263f2
 15 842e1f17-bc1b-1415-a215-49ed8e1518bf
 16 9c6f913c-cb6f-699c-bf16-62f4887e9c96
 17 fcec7770-4e5a-1e4d-b53e-a29a88dbcf15
 18 d1913b71-b42b-4252-b0ce-bc59492a704b
 19 85c4b2f1-ceca-8a3a-8c6a-f2abd272fd4c
 20 a5985eda-be54-1e93-97c5-f5f56513d315
 21 1850c9ba-54e3-800e-9be3-c958024e3d67
 22 4b55a7ee-96fb-1c0e-9c9a-e6faaff42202
 23 08789491-63b5-6999-a449-b49031f0a4af
 24 9d3f8f79-e0fe-01ee-8680-bc7d0c5338fa
 25 63cd6f9b-dbf2-1a45-9414-4196ffee8f4f
 26 51126f24-b124-1a92-b150-73c448c69cdc
 27 7849cfee-373d-4845-854e-3465b8d086f1
 28 aa45eb1d-ef84-1460-9aeb-d2179d321f93
 29 203c3856-d12f-2877-968e-547a03ad4bee
 30 ba9755ba-cb36-1606-b156-14659ebd2fad
 31 b55313a1-e115-1b0c-ae80-f871521d99e7
 32 99af9582-b481-526b-a69e-aac18157b51f

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 62838644621323161481816011412115. Exactly this sequence comes out of new Random(46).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 7 of Run 50 (seed 2,278,890): new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs