A858DE45F56D9BC9 archive

201308111506 1k52dx

explained decrypted filler

seed 603

Metadata

Post ID
1k52dx
Title
201308111506 → 2013-08-11 15:06 on A858's clock
Posted (UTC)
2013-08-11 12:06:54
Timezone
UTC+3 · title 15:06 against posted 12:06 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308111506) = c97764f154021f7183ce543234f3e05a (name+title)
GUIDs
40
Filler GUID seed
new Random(603).Next(9) ✓ verified
Run
Run 50 (seed 2,278,890) (seed)
Draw
45 · predicted N = 40 ✓
Machine boot
2013-08-05 20:29–23:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308111506 (name+title). Key = MD5(password) = c97764f154021f7183ce543234f3e05a, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 350c59af-51eb-6b83-89c4-d964b7e01596
  2 059a1951-bfdb-6aa0-98dc-a2ebc865c9dc
  3 440e4bdd-1836-20f1-b6e2-d82634dadd2b
  4 d2229805-4819-2909-8c4b-81e42aeb94f3
  5 efd48e37-c912-473e-89b9-5c5cd9a0f46b
  6 c471efed-4435-44f2-8be6-666521ec6991
  7 d98c7678-0855-0463-91ee-801465fbfcd7
  8 07645f5e-329e-8cbd-af0f-71d5bd22ae84
  9 5cb367a9-eedb-5e14-817d-db79afb35003
 10 a559a456-f0e6-5c8a-a025-dff0560ec289
 11 19b73263-4d31-4595-a6c8-74cf5a14e48b
 12 bdecab32-2fc6-2b0a-a3eb-80ff9efa55d0
 13 06651e9c-9552-1b76-bb9b-c349a5bf66c5
 14 e0ea5c95-f75f-1f07-95a7-5e1f480dedfe
 15 f0e50bfa-335f-0ea8-8eb4-5fc61dcfb749
 16 c6752c2d-e1d4-583b-b094-7750e1361319
 17 4f9e9b50-bbfb-3c1d-9f23-742f8461e6cb
 18 fa9669c2-f1bd-7faa-849b-aca67386b20b
 19 52576c49-09aa-0ea5-a5cf-bdb195734369
 20 a7b685b0-2ea4-71a3-8071-d52f4b4c2d45
 21 aeedeec5-b147-8b80-8c2b-1bcb9dc065dd
 22 19887796-805f-72c7-947b-2d3ec51b895a
 23 da41cfac-b3d3-89bd-863c-365f52001976
 24 d6d726af-a0d0-6773-9ae4-123e721a1a04
 25 ae34b417-941d-7ea7-a94f-6e71c819adbd
 26 d06c63eb-71b6-3765-97ff-f10d9af25202
 27 7d62ab6c-e2cb-3c42-aa7a-999d781377f4
 28 6ebf3482-5966-2d44-8ad5-5d5b374b47aa
 29 9804aaa1-4f96-0d00-87ed-26204e36f8b9
 30 72a27b47-4c82-6549-9a3d-24f339a706c2
 31 288bbb29-d568-77db-9e2f-9ba8dab3e1c4
 32 56b2240b-0bb1-2fc5-b9ce-8a5760a32877
 33 ffee822a-34d0-7882-88b7-823182b98e2d
 34 a8adb7f3-71fd-04f6-a75e-d6037cc14618
 35 d9571714-e367-13d1-b5b7-17adb423d7cf
 36 5779bffe-f809-8345-adc6-b4de3c52b672
 37 66edf422-65cf-4606-a542-142346ea6590
 38 2199de1d-99d4-210a-a14d-fe3ebb4b8f6f
 39 fe56e916-543b-5493-b946-f228c44ae22a
 40 cc3ba0a6-4601-39f6-bc37-c45d136df051

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6622440855421105370787867332067270184253. Exactly this sequence comes out of new Random(603).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 45 of Run 50 (seed 2,278,890): new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs