A858DE45F56D9BC9 archive

201309031259 1lmt5k

explained decrypted filler

seed 989

Metadata

Post ID
1lmt5k
Title
201309031259 → 2013-09-03 12:59 on A858's clock
Posted (UTC)
2013-09-03 08:59:56
Timezone
UTC+4 · title 12:59 against posted 08:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309031259) = 58af0ceab86ae4f2dc2fff0d8bcadba5 (name+title)
GUIDs
40
Filler GUID seed
new Random(989).Next(9) ✓ verified
Run
Run 52 (seed 1,430,705,843) (seed)
Draw
28 · predicted N = 40 ✓
Machine boot
2013-08-14 07:34–10:34 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309031259 (name+title). Key = MD5(password) = 58af0ceab86ae4f2dc2fff0d8bcadba5, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 338b53ef-5251-3c6b-8d9b-a01606390bca
  2 7f2949e0-d780-07be-9d1b-a55545a5698e
  3 58b2ad53-39e4-0f45-a268-320598ce81df
  4 7952747b-89a2-53b6-a9b4-8bb0ffdb7111
  5 0403d913-681a-6611-a933-417f60733141
  6 e85539b7-af3b-7b0e-b3f3-fba1a16c26a0
  7 758af54f-b7ac-0b08-b74b-2104c1458155
  8 d82822c8-c1ed-5712-bac8-662090dce1aa
  9 e06c9f79-39e4-3df7-8f59-49278989fe18
 10 9e2dcebe-d064-834b-9dfa-254c62ab4258
 11 323c6fe6-2470-8579-bf44-1834a11af9ea
 12 4788462a-d703-5a4a-94b6-3c47751dfa21
 13 c40356d5-2378-44d2-995a-579e7ef8ff5c
 14 28197398-65d0-0c47-a99d-fdfdaab9bc23
 15 a5d26f89-86f8-2095-8dd9-0afee3e6b8b6
 16 90830693-3112-6020-a8b3-cd63ea322252
 17 675ae3fb-1ed7-50ba-ab78-18bed148657d
 18 18efbefd-34f3-1c87-a40a-62d53991aea4
 19 c1f57c1a-720a-41d4-a38d-6e882f08b716
 20 8a56e7e2-a0a1-2953-97f9-9da645dd3030
 21 488563f7-0a08-2fc3-b326-935f21162f5d
 22 5882b948-d5e8-44a9-8c82-13c5e7467a85
 23 bf92b6f4-284d-14b2-ba4d-bda0ec03ad41
 24 2fd5239e-f10a-47d0-a0c9-4285e0dedf5c
 25 63a2138e-e21d-5003-bce3-90034dd8efad
 26 827c21b2-d4b4-5004-bcd4-1e724a03c863
 27 2354f410-b889-23e0-a5d2-2b7107fdafac
 28 5b322d19-0fe3-49ee-bd3b-fd4af60bd999
 29 38e4d3f6-868e-65a2-b4da-e55223162f49
 30 63616e8f-0ac5-54e2-bac7-eb3aea1b6612
 31 a8aac28e-0c18-21b2-8ee4-f5c1cdddc01e
 32 f7aae15b-30db-86b0-86c4-40ae46261cf7
 33 2cc2a011-37fe-8beb-9cf2-d4229d1192b2
 34 838abb4e-02da-79e8-9e40-a35face61458
 35 f355fce0-e481-8b2f-a5a2-fe4fdcfcfb24
 36 abc7d7f8-26d6-5de4-99ec-db7d4b652bc4
 37 3aa34dab-48eb-2afa-b8fc-acf2a5d05ca4
 38 1bb7f478-bc48-3a98-bcba-e63602c3315e
 39 0fedcb89-6024-6a22-9a9b-67cfc93b3245
 40 8fa48d1d-f8ef-4faa-bf6a-3a0ad109994d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3005670538854026514224145524652887852364. Exactly this sequence comes out of new Random(989).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 28 of Run 52 (seed 1,430,705,843): new Random(1430705843), 4·Next(1,12) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-14 07:34–10:34).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs