A858DE45F56D9BC9 archive

201308100306 1k2754

explained decrypted filler

seed 226

Metadata

Post ID
1k2754
Title
201308100306 → 2013-08-10 03:06 on A858's clock
Posted (UTC)
2013-08-10 00:06:55
Timezone
UTC+3 · title 03:06 against posted 00:06 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308100306) = 6c588ed6d6535641afa58601ebc83db3 (name+title)
GUIDs
36
Filler GUID seed
new Random(226).Next(9) ✓ verified
Run
Run 50 (seed 2,278,890) (seed)
Draw
33 · predicted N = 36 ✓
Machine boot
2013-08-05 20:29–23:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308100306 (name+title). Key = MD5(password) = 6c588ed6d6535641afa58601ebc83db3, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 10a42a24-7577-7b00-8657-63e882f2ccd1
  2 8394a9fd-fd38-1967-b469-539cacb3b851
  3 a8b3b07f-0335-672b-91ff-6e9f056c8fa0
  4 b56dc171-f011-7410-b51e-72394182422c
  5 9bf5a1e7-7f43-20d2-bf52-a23d0709e1c3
  6 a305a6f2-42c0-003d-ad51-a8b80efebf4b
  7 37414c95-6653-18da-8781-627068f425cf
  8 deedfc3b-8a07-78d4-8df8-d53b9fc08aa6
  9 ecd25462-35f1-89fd-a685-78df165b1a2f
 10 2920a7d5-8db8-59c1-afdd-ea22c5ad3f43
 11 87ae69ca-4856-7c78-bdfb-c0d65c6747c8
 12 80721567-b77f-8bed-90d2-4cc716614b71
 13 78435a84-2865-884b-8b97-5d43cbc28dd3
 14 167b8823-c29f-0185-a8ff-b9ac515c0ec9
 15 49b8997b-bfce-11d7-8609-b450c37c312b
 16 5c76a097-af7e-16f6-be09-fae32d97a838
 17 c3d2302a-84bb-70d0-8aa4-28dbd0ff6850
 18 a197e31a-54b7-1ebe-a4d5-5fc2de6228b9
 19 c81fc32f-312f-7d68-8c2b-9af49332fd10
 20 6fd6121e-cf3f-74e1-9109-459df50b2527
 21 5808390b-648c-7bf8-ac42-94dc25162e49
 22 948d1c0d-2ef9-2cc5-83c6-da451deb6d3c
 23 a2c823d5-0fed-1812-89dd-1af0ca72ef61
 24 fe3aec5f-82c8-895c-8c7b-57523ebfc572
 25 b42a2c4e-e054-76ba-b660-0c82c8966949
 26 e07569bc-30a2-7559-895b-02495d7d3b83
 27 59fe50cb-5eea-2e95-85d0-1c218a9cc788
 28 7ae66445-3ab8-6f8b-b32b-ee60d471b77a
 29 90270d36-6e59-8172-bb04-abb9449bdc60
 30 1b8d1ec9-840f-0024-87dd-ccf4345ba8a3
 31 c9224ed4-b848-527c-b8d1-5e629a845b13
 32 29c8c60e-287f-8306-b788-593b630d51e5
 33 202a5784-e839-1725-bc86-46cfbcb1e1f4
 34 20cb4cfa-abd5-59b8-a01b-b13e05bb770b
 35 36206ba6-38ed-5014-835c-82d18a3eb98b
 36 5a01fa5c-bb21-5150-963c-272da5449951

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 716720178578801171777218772680581555. Exactly this sequence comes out of new Random(226).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 33 of Run 50 (seed 2,278,890): new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs