A858DE45F56D9BC9 archive

201308312159 1lh0d3

explained decrypted filler

seed 171

Metadata

Post ID
1lh0d3
Title
201308312159 → 2013-08-31 21:59 on A858's clock
Posted (UTC)
2013-08-31 17:59:59
Timezone
UTC+4 · title 21:59 against posted 17:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308312159) = 091f2b1e32fa58665616908f4ce19042 (name+title)
GUIDs
40
Filler GUID seed
new Random(171).Next(9) ✓ verified
Run
Run 52 (seed 1,430,705,843) (seed)
Draw
7 · predicted N = 40 ✓
Machine boot
2013-08-14 07:34–10:34 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308312159 (name+title). Key = MD5(password) = 091f2b1e32fa58665616908f4ce19042, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5e8f0896-9fbd-0473-b43a-b9820cdf752b
  2 12ee0dd4-2036-8a82-ac8f-af087a9f13ed
  3 0ae74300-4109-2e1a-b978-77d23a451d8a
  4 9edbc373-cebd-0842-aa0e-04e9a894e56b
  5 4f788704-392d-3878-9d53-cc9842eeac68
  6 7cc123a0-4572-8df8-a9e6-6652d3500813
  7 fb2d5b5a-3653-4e78-8149-3033ee8646ad
  8 b9b2bb52-814f-2cb7-be33-d61b8fd89510
  9 bb0c0ea3-06f6-19be-aeef-d7b2ce1cd2de
 10 d1866965-5ecc-26b6-b155-074da79801d4
 11 ac9afe64-1382-27a0-be15-b45969f65204
 12 e13311a8-b85b-8fe8-b798-148e2b6d9d9e
 13 3e30f0d8-c1cb-1c81-86d7-9fbeca37be38
 14 aa491232-2484-3019-9ec0-d4bf00b3a919
 15 d712bb76-e023-6e3a-9cc6-924508e6a8cd
 16 fb1e6ada-adf3-79c0-97d6-0806c8528276
 17 8c7e1989-78e7-6f7b-9d1f-471b95b21715
 18 d471a442-c910-0cfc-8388-168fbfd79235
 19 7a848ac1-85d6-2d01-b880-6d5712ebb631
 20 ee2db040-bc7d-4c2d-b295-7cfa75ba15b0
 21 04ce999e-a574-4b45-b214-0f31f940d8ec
 22 2f1ebeaa-daf4-7b70-99bb-76c5c86d529a
 23 5e3d9f6a-86ba-8abf-a6c7-ff91624d21ea
 24 1b522e02-ca1c-6c15-94ff-25d146bd8ccc
 25 2f9e3363-94ad-4085-98c2-418c932777af
 26 4e1dba99-7d37-4206-8464-37b1c14bcb1b
 27 f888417b-9764-8659-bac1-61e723f1a428
 28 01574be9-919a-5fd7-bc6e-edab0cb4e02b
 29 983dda49-1d7c-7910-9aed-03d7efc2425d
 30 c8febdd1-94c0-7636-9820-9cc91e911cdb
 31 e38e4eb9-cd07-278a-8a65-26ee4e74c76c
 32 a81f8a01-6e65-421b-bf64-7943ad0382c6
 33 ee0a9da7-7cd0-0b80-8a3e-683373f903fa
 34 4a9307e2-5263-29c5-b116-a4d48e150772
 35 0a2d8ee2-3a22-3853-a2dd-e995f7f5029e
 36 8e3c507c-85fb-16ea-a424-3f90c16b7478
 37 6b36f6de-384d-6496-8589-4aff3cd6e7d0
 38 79652dfc-440a-89fe-abac-0de95876f082
 39 b0e30326-0e8c-5ebe-8d04-511f055ccf98
 40 77146777-a1c9-01c9-b5a6-8a5d9e41ff3b

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 0820384212281367602447864485772402316850. Exactly this sequence comes out of new Random(171).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 7 of Run 52 (seed 1,430,705,843): new Random(1430705843), 4·Next(1,12) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-14 07:34–10:34).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs