A858DE45F56D9BC9 archive

201308080606 1jxjjt

explained decrypted filler

seed 513

Metadata

Post ID
1jxjjt
Title
201308080606 → 2013-08-08 06:06 on A858's clock
Posted (UTC)
2013-08-08 03:06:58
Timezone
UTC+3 · title 06:06 against posted 03:06 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308080606) = f66e1955543b895d12bbb726f10593b9 (name+title)
GUIDs
32
Filler GUID seed
new Random(513).Next(9) ✓ verified
Run
Run 50 (seed 2,278,890) (seed)
Draw
18 · predicted N = 32 ✓
Machine boot
2013-08-05 20:29–23:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308080606 (name+title). Key = MD5(password) = f66e1955543b895d12bbb726f10593b9, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 4c5e0677-e461-68e0-9eca-127ae38903a6
  2 45df9fc4-9de8-33ce-bb69-0a0731f08bfd
  3 c57a15b2-8d3d-3a7a-95d4-35facedebbf4
  4 d28f4246-04cb-06e3-8a6e-3c3da376146d
  5 3b224f5a-e0c0-70a5-9b6e-34d9063f0ffa
  6 25b712d1-287c-7be1-a6b4-4c9d5049919c
  7 9acd71c2-0dbe-669a-a2a4-1645abc0c077
  8 41bbe9e0-55fa-7281-8c45-20f5dc95489a
  9 de553821-8160-365d-a6e9-062c7a1c690d
 10 3fa8061a-e632-3ea7-bbe0-fb227b2fac9d
 11 baf8ce26-f52b-231c-b9c7-18f09f0857ca
 12 d5953bbd-ae59-89f6-bca4-884132c41184
 13 fba6d344-de43-2c69-9eb9-a689d6c23b05
 14 f579cd25-197d-3ece-977e-54919eeec3dc
 15 ea8b3291-2854-0842-8b99-3396a5372e62
 16 c12b9295-dff3-3690-9a0c-bcd84ffda6e2
 17 16ad85db-4a89-4407-a9dc-a48dac2c5a27
 18 04486562-143e-0cc6-b7c1-a7b6326e8e61
 19 7c5ca38d-bb33-5228-9c93-631997e1b4ce
 20 27ac9188-995b-8144-9657-2b8ffcfde555
 21 6f568bd5-3d0c-8052-984d-f3aa91fe23d8
 22 e6cd6ee3-b905-6d40-98b2-4019857e22f7
 23 f444e9d8-96bd-612e-bd9e-82fe0ac75f50
 24 0dc82d00-01c5-238d-aaa5-deb5201b0b37
 25 070b8611-2331-8e5e-9e01-b66c29cec1f1
 26 df254fce-3ea4-41f9-9a7d-b1e2878f45c9
 27 5f5604d1-fca5-86dc-84ba-9ede6e9c6b28
 28 cfd440b3-d1db-4bcb-b45d-a4013be8d303
 29 0787576b-406c-2a71-bd6d-f2f117be003f
 30 9e5ca997-ea4d-2756-8099-7e0c224c7aa3
 31 a8bbe519-ab76-52a6-90ae-3f55eac32d57
 32 e7dec9ab-ba9c-57e6-98da-04d1520adbc4

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 63307767332823034058866284842255. Exactly this sequence comes out of new Random(513).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 18 of Run 50 (seed 2,278,890): new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs