A858DE45F56D9BC9 archive

201308110006 1k3wvs

explained decrypted filler

seed 161

Metadata

Post ID
1k3wvs
Title
201308110006 → 2013-08-11 00:06 on A858's clock
Posted (UTC)
2013-08-10 21:06:54
Timezone
UTC+3 · title 00:06 against posted 21:06 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308110006) = 1481b164dc72f620dfb1c2eaf08c308b (name+title)
GUIDs
32
Filler GUID seed
new Random(161).Next(9) ✓ verified
Run
Run 50 (seed 2,278,890) (seed)
Draw
40 · predicted N = 32 ✓
Machine boot
2013-08-05 20:29–23:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308110006 (name+title). Key = MD5(password) = 1481b164dc72f620dfb1c2eaf08c308b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 1a6ce83f-5b91-7d3f-b914-ad4716f6d0ee
  2 84ee3746-c9d2-0d5b-89d4-24d81830ca62
  3 5d815284-14e6-27af-a7a5-f3c0964e3c02
  4 80c06d89-f61e-8b4d-a0a2-7fcb07ab1786
  5 afdb25d7-2b20-877c-8e8b-940b8893390a
  6 5d7f02fa-89a4-2a3a-849e-0c4c68fc15a9
  7 f5fc1abd-f591-00ea-8b92-85f32386e46a
  8 8300b6c8-567c-17d2-80d4-a6e41b1c9f28
  9 bc916dfd-b986-82f2-8a9e-0f660f5b1c4f
 10 41a7fc3f-b991-5925-81b6-a63e844d35d9
 11 fafcd031-e1e2-8c69-9d20-6489b090c434
 12 abf1ad4a-750c-1544-beb6-92303fd5bd2f
 13 f59213d1-d442-2288-96f4-272eae1d4f8a
 14 dcaf964c-5d00-2c6c-99ef-91f975f1662f
 15 1c39e777-bdd8-63b6-af1a-2c0f69b05a67
 16 bab1b134-6fee-57f2-b4cf-6439252dc476
 17 c71be9e1-2e65-408e-84bd-01bc101d0435
 18 eae3aed8-7cde-7668-99a7-c1a6740468d0
 19 0ff16375-d9af-0cfe-b370-0c24dc776cac
 20 148d5a09-6e0b-5e38-8334-af1a23db166c
 21 a0b44a7b-f1d0-1257-9100-b70f7ea82dec
 22 cb59ab61-7a8d-3fff-8b7c-116afce2f51d
 23 643f5933-56e3-151f-acec-f7da9a90170d
 24 280796a1-3394-277e-92e6-9564a3264e14
 25 0c4c8cc8-a41c-493f-b364-58299a52ca57
 26 24bd3045-0d62-0548-b54c-8d0d141a9027
 27 ab2b0a05-e61e-3edd-80d5-01d80b10a9d6
 28 c76c4242-baec-479d-955d-2b5e3a49ba20
 29 1982e401-221a-0bba-a2b7-862d9edfda23
 30 16a5a9f7-1bc5-68c3-abc2-1691500b1187
 31 32f99fa6-781c-5c1a-a938-f8015c274479
 32 b8edb867-71b1-74fe-92aa-c9e21a4f959f

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 70288201858122654705131240340657. Exactly this sequence comes out of new Random(161).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 40 of Run 50 (seed 2,278,890): new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs