A858DE45F56D9BC9 archive

201309030059 1lllqp

explained decrypted filler

seed 635

Metadata

Post ID
1lllqp
Title
201309030059 → 2013-09-03 00:59 on A858's clock
Posted (UTC)
2013-09-02 20:59:57
Timezone
UTC+4 · title 00:59 against posted 20:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309030059) = aabaa878e4c831af60c6338c849c5224 (name+title)
GUIDs
28
Filler GUID seed
new Random(635).Next(9) ✓ verified
Run
Run 52 (seed 1,430,705,843) (seed)
Draw
24 · predicted N = 28 ✓
Machine boot
2013-08-14 07:34–10:34 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309030059 (name+title). Key = MD5(password) = aabaa878e4c831af60c6338c849c5224, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 4f843876-1452-4c6c-8809-21dae3bbf302
  2 47f8bbc8-a7fa-12a8-a2a7-08aef150c69c
  3 a769d412-f2c6-558c-96c1-11c062a42128
  4 854cdd44-2f2a-0410-b89a-d0fde6f03602
  5 0d331796-044d-8be1-86b1-1488ab416517
  6 72a228ae-d039-4a91-9855-889f6df711b5
  7 0fcbfa79-d6cc-385b-88c3-af75e700292e
  8 eea04372-df14-0e56-b33c-644d5f96a02f
  9 944cb447-1538-4cb8-9545-7deba79f9653
 10 2534f7fc-1982-34b7-a231-c7a80e1cd4e6
 11 b189d673-e5a4-1fb5-9e71-dcb71070eb85
 12 bbef862f-f4a4-1805-b130-43ca5c2290bb
 13 0c7e7916-a099-1ec4-9480-a39a298ed541
 14 254b7bc9-4ad1-79db-87bb-60704d4a91ed
 15 58cae649-294f-4021-b428-f3d3ccc15e93
 16 ad25924d-d8b8-5d9e-b2ed-d83eb50ae787
 17 f00db58c-0cf1-7b95-81e8-486e647e4db6
 18 d98f8d89-3ce5-6b82-bd13-bc772a32e0b4
 19 57892bca-47ef-75dd-9f84-40de0eb63e64
 20 bdae3de0-e23b-1e9d-bb2b-8886f2a5aaab
 21 08db0a4d-6f30-1012-8292-41f5a354e395
 22 3f3a8d87-3518-58e4-9866-de0a3abd2b7e
 23 d864c38e-77e6-29ff-adaa-60b58da51537
 24 41da781c-3c60-791e-a4b1-740e48066dc7
 25 f4966bf5-a893-83b1-9656-6a831a64b89a
 26 03b6cc8a-3e99-8e23-a276-d5872bb73f2f
 27 ac368e04-4dab-7667-9d6f-e73c7658ac5f
 28 c66a7e9e-8162-1a4d-88dd-dd89722efd36

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4150843043111745767115278871. Exactly this sequence comes out of new Random(635).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 24 of Run 52 (seed 1,430,705,843): new Random(1430705843), 4·Next(1,12) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-14 07:34–10:34).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs