A858DE45F56D9BC9 archive

201308111806 1k59vj

explained decrypted filler

seed 471

Metadata

Post ID
1k59vj
Title
201308111806 → 2013-08-11 18:06 on A858's clock
Posted (UTC)
2013-08-11 15:06:58
Timezone
UTC+3 · title 18:06 against posted 15:06 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308111806) = fafb094a3e5fd94a82b707fe6c13bf1a (name+title)
GUIDs
40
Filler GUID seed
new Random(471).Next(9) ✓ verified
Run
Run 50 (seed 2,278,890) (seed)
Draw
46 · predicted N = 40 ✓
Machine boot
2013-08-05 20:29–23:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308111806 (name+title). Key = MD5(password) = fafb094a3e5fd94a82b707fe6c13bf1a, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 cc195b55-3ad4-7e2d-ba53-45f763742902
  2 280dbc72-37c8-017e-8d8c-b95701ac9431
  3 cdc4b97e-8489-8b7d-9069-0382035adc45
  4 76d0fbd0-c3fb-0495-8950-c06dd37721a2
  5 bf3b2344-b098-7204-9453-e593554b9a0c
  6 02677b05-e457-1c78-9e09-56d4668955e4
  7 5f8093e5-532b-895c-9ac4-19318b3df4af
  8 fd5b3122-bcf6-6766-82d2-6dd5c6b32c0b
  9 31e0d38f-58ed-2304-945e-78ae55f11130
 10 cf6e1817-2b87-8853-835a-4e81a4645097
 11 c1187617-1a2b-2f5e-8278-eaa2271e9399
 12 44167f79-fec7-1fcc-9221-b2efa9ef626a
 13 513eaa90-9682-3580-9583-d389aba3e561
 14 f08dd41a-f52d-4340-808d-70dbc7850fee
 15 da0017eb-ad03-62d5-86f9-bb971006c936
 16 cd8044eb-132d-1a53-8b85-6c1f81e3a1e7
 17 daeb61a7-71c7-77cb-b765-95250fc4c207
 18 3a576687-219b-0d77-a5c5-b26c270e41c7
 19 ed786be3-f267-3d93-b594-cb01223c8937
 20 04b20d9a-3cfa-6236-be5d-aa60f75a8b14
 21 8fb9f005-ee40-3e06-bfe5-a66dda612fc5
 22 4c6161a7-da7a-3b55-8f74-dbbe964daa02
 23 59d6d5c8-bf64-5030-8034-b251e684741d
 24 4f1a9a69-79d9-5f16-9650-8f9db9e27756
 25 612e02a1-ba1a-7221-a867-e9aaff233e22
 26 e609619e-92fc-4603-9ad7-9850272a8183
 27 47d663a1-bb99-70f5-bb53-770cff461e85
 28 8329ffdc-5471-4fea-acc0-805b8fe09493
 29 fcb79173-d343-5c8f-8225-6cdf210f9e5e
 30 ef870edf-e72f-38ac-95fe-6b107054feff
 31 f6b27f81-3c74-0916-b0de-5e4972870c79
 32 084b564d-aa22-4be9-976e-d47c468f33aa
 33 5c7cd497-7e1e-6da2-901f-12a265a9fc92
 34 f0c2966e-9ace-7689-b956-92a05d278097
 35 ed42372a-2b11-0cc0-a638-c8eaf0af1792
 36 ef368a38-07dc-1d97-bc13-7f88098bb33d
 37 6ae4ee51-f466-14a7-a093-babf6514cb2c
 38 98bf3a0f-bae7-3a65-a44a-0b2a9a886d17
 39 aaf508af-d0eb-0d7c-bc39-64f042879a4a
 40 7db26512-ba02-3d25-9154-f8bc63ffcbe6

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7080718628213461703633557474530467011303. Exactly this sequence comes out of new Random(471).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 46 of Run 50 (seed 2,278,890): new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs