A858DE45F56D9BC9 archive

201309021859 1lkuzg

explained decrypted filler

seed 905

Metadata

Post ID
1lkuzg
Title
201309021859 → 2013-09-02 18:59 on A858's clock
Posted (UTC)
2013-09-02 14:59:57
Timezone
UTC+4 · title 18:59 against posted 14:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309021859) = ea81039d191efd91b9516e2d9e741bde (name+title)
GUIDs
36
Filler GUID seed
new Random(905).Next(9) ✓ verified
Run
Run 52 (seed 1,430,705,843) (seed)
Draw
22 · predicted N = 36 ✓
Machine boot
2013-08-14 07:34–10:34 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
10 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309021859 (name+title). Key = MD5(password) = ea81039d191efd91b9516e2d9e741bde, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 f446343e-601c-4af5-9650-f49757844fac
  2 add4c4dc-b8a8-3fc0-916b-8202e04bbdb4
  3 e32ebf2e-f9ed-3260-91b3-1157f6c455cd
  4 6db5d2e7-4ab3-6be7-b1b4-cd02630fec34
  5 364a753b-ea31-762c-be54-647c54c7c6dc
  6 a742e04d-f65c-3c41-8485-ac30855249f0
  7 740445d8-82ec-3df4-a446-544c008226e4
  8 0cb1d4bc-c90e-49a0-bd2f-ae87832c7ad0
  9 b707cd6c-2cf0-838c-b126-bd0dde08baea
 10 0f7bf01f-3b7c-8473-9d32-47ec78d8bb40
 11 87081441-ec1c-0946-8872-2a035ae35378
 12 a23acfea-6347-05a5-ac3e-9c27ab80131f
 13 5173e0d5-529d-639f-81ca-f996bf12637f
 14 4b4ad7d0-a99d-270a-8da3-c38b96861801
 15 92fd2f05-bdcb-4492-ab3e-16fa3f68c4c0
 16 762e99c5-0c12-144c-977a-6f16eb9fb42c
 17 6aaf28a4-8983-2005-868e-07d3c330cb50
 18 a2bdbe39-2d21-0859-b801-13e96eba72b5
 19 2c6a6453-b92b-15ce-815f-3a9d2ffd9914
 20 dfc74785-8aa8-65f3-b4ae-2ba9d796728c
 21 3b90aad0-3a32-0564-8cae-9fdb9e3f4739
 22 bf6079c5-9ca6-73dc-bd7a-3423432ca681
 23 2202f6f6-f183-836c-b87b-8963a2dc03c6
 24 337284ac-8587-186a-bec3-7c4fee90f904
 25 3b19b283-8cbf-33ff-a4ab-09e4d73d891b
 26 fb8b5438-9196-583a-9502-3990a81008d2
 27 ea422a1a-3953-08a8-a344-818aeaed43e8
 28 290849df-fc06-3e1e-8b99-f1a38a31c417
 29 839ec10c-cba0-4e73-b223-a609d3767f00
 30 7497ed84-abc4-8535-b8cd-1f1082c978d4
 31 38cfd174-c92c-2038-89d6-54c2e73c4653
 32 cfcd8d2e-c893-79cb-a84f-8ef7b07e69fe
 33 47c414b3-1dfa-1cd1-b00c-91cc78f65314
 34 d1bb6eb9-c743-6fc8-b74c-9beecf9999c4
 35 7dee7381-23bc-5146-ba38-b30de39b96ab
 36 9c202ed8-c992-8f6a-86e6-60fcf8817e9a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 433673348800624120160781350348271658. Exactly this sequence comes out of new Random(905).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 22 of Run 52 (seed 1,430,705,843): new Random(1430705843), 4·Next(1,12) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-14 07:34–10:34).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs