A858DE45F56D9BC9 archive

201308070606 1jux5m

explained decrypted filler

seed 609

Metadata

Post ID
1jux5m
Title
201308070606 → 2013-08-07 06:06 on A858's clock
Posted (UTC)
2013-08-07 03:06:59
Timezone
UTC+3 · title 06:06 against posted 03:06 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308070606) = a525477473a99e6529eb01035ec81efb (name+title)
GUIDs
32
Filler GUID seed
new Random(609).Next(9) ✓ verified
Run
Run 50 (seed 2,278,890) (seed)
Draw
10 · predicted N = 32 ✓
Machine boot
2013-08-05 20:29–23:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308070606 (name+title). Key = MD5(password) = a525477473a99e6529eb01035ec81efb, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0bd45574-d0f4-767a-a5ea-549c3f229dbe
  2 8b479ab0-31bf-4406-afb7-fae0291e8c31
  3 de99cd19-a2c0-4067-883b-86b63551df14
  4 511e6c71-53dc-490a-a00b-c5cc7fb3bb31
  5 b389e626-f897-1cbb-84c3-7a56767dca89
  6 f74f39c4-0e98-63b2-855a-eb5e3a835f78
  7 43c5b520-02a5-6e22-a868-1f20db03a86d
  8 09cb7e8a-0ae7-8541-a603-a12e0cd63806
  9 fb3dfe83-8ecb-2e8a-bb10-a2096458e459
 10 e5720ca2-9e08-7394-8ff1-27d80c180d91
 11 b5b48399-cbe5-8967-ba63-5f8f05cd1a6b
 12 0f155769-9e81-88af-a6d3-02bae79f3bc4
 13 5bfaf008-d8f5-2265-a8f3-fd3278dcefdd
 14 e937858d-27c2-20ca-bde9-7cdea851deee
 15 3ebffac5-6131-298d-ae62-0c00d3d3614c
 16 a101e539-ac23-3da9-8e4a-60304407e0b9
 17 c3dd17de-bc42-7985-82f6-3946696f7754
 18 e0fac8ba-771b-599d-886f-ce65f6294001
 19 dc147afc-2617-13c0-afe4-80efa56eb5ff
 20 d634bbc6-1f4a-1e41-ba92-db4d92b135e8
 21 be3da402-0d82-6c89-aa44-fd2d47111fea
 22 2cbc294b-2df7-2771-bfe4-fe35f97697aa
 23 4b31e437-9eb9-807a-bf23-878697587b51
 24 f5d8b501-1a36-7552-8e4f-b1ac99050857
 25 44d26988-72d2-3802-bada-74d3c3022267
 26 24091580-70ad-2afc-89f4-d5f041a0bbfd
 27 7cb79738-c73d-4db6-94a7-a6a17025a7f8
 28 29d3b75e-7a31-0ef3-8e36-ed919f93ee4d
 29 866178ce-9079-6f2b-8b40-bd5a9eb5b5d3
 30 e7398d11-2fdf-46aa-b96d-89657de89338
 31 bce8ce82-92dd-08b9-ae9f-d2ec87384598
 32 386db84b-a44a-7afd-9961-42d9bce7fc2e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 74441668278822237511628732406407. Exactly this sequence comes out of new Random(609).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 10 of Run 50 (seed 2,278,890): new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs