A858DE45F56D9BC9 archive

201309020659 1ljymz

explained decrypted filler

seed 580

Metadata

Post ID
1ljymz
Title
201309020659 → 2013-09-02 06:59 on A858's clock
Posted (UTC)
2013-09-02 02:59:57
Timezone
UTC+4 · title 06:59 against posted 02:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309020659) = 4d4c6029d91d5f8712332339d352f519 (name+title)
GUIDs
28
Filler GUID seed
new Random(580).Next(9) ✓ verified
Run
Run 52 (seed 1,430,705,843) (seed)
Draw
18 · predicted N = 28 ✓
Machine boot
2013-08-14 07:34–10:34 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
9 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309020659 (name+title). Key = MD5(password) = 4d4c6029d91d5f8712332339d352f519, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 008ef610-fe30-6d23-a9bf-ddaccaef9ae2
  2 ec37f03a-6da4-0c7a-8917-aa17e9fa461a
  3 c1c5f1c3-1dce-1835-a26b-223689ef322c
  4 62026448-fc40-38bb-a1d3-d08ab786628e
  5 46c749a2-7be3-03f4-a0a0-3e259e2eccb2
  6 508276f5-6eef-3fca-b3c5-b30ad336d27e
  7 eb76208c-cc35-726a-b947-7d293d36234c
  8 4815a643-42a9-3671-9ec5-cf1ef98b22d0
  9 41d001ec-a5cd-6363-9970-60816f3f3544
 10 993b66cd-d41d-1485-bd74-529ae3a4da68
 11 95332ee3-8aa6-5658-a134-6cd29a12d9d5
 12 b465ad1c-f420-22cc-ba03-739b634cb41f
 13 3cbe68dc-868f-3ec5-a96d-983e247ff4b9
 14 272245f4-244d-1cf1-944a-e0cb637c30c6
 15 06ae61e3-3143-8894-86ee-1dc29b752e72
 16 748d667a-1ee9-2a3b-ac15-35cb8959088b
 17 3dd89b8b-14d9-6886-8d7e-2d9f287d20c5
 18 f3a57c20-e771-5bca-8c20-0cb9892d1179
 19 52b105e5-2b54-30ed-a458-85365efd993e
 20 766a4ff7-c5b1-83b2-89c9-9733ee7c6264
 21 11bc132c-6885-7b20-a763-ffe4336a44d9
 22 bf70cdf4-6c0d-15ea-9bdc-7912ace35be8
 23 e8ec57ce-01b6-0d0b-abc6-758118aeef75
 24 cb541fb4-2623-53d0-a046-8dc9f3422fc7
 25 e1282950-bb25-4b77-8a90-24640f235deb
 26 c7e8b8a8-9a1d-5c3b-819e-05a821f8ec8d
 27 64988b18-cd84-5b93-bf2e-c2ee3e1382c1
 28 89e2f8cd-4a3f-0872-bf1b-bf3f6d16d27a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6013037361523182653871054550. Exactly this sequence comes out of new Random(580).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 18 of Run 52 (seed 1,430,705,843): new Random(1430705843), 4·Next(1,12) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-14 07:34–10:34).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs