A858DE45F56D9BC9 archive

201309062159 1lv73q

explained decrypted filler

seed 873

Metadata

Post ID
1lv73q
Title
201309062159 → 2013-09-06 21:59 on A858's clock
Posted (UTC)
2013-09-06 17:59:52
Timezone
UTC+4 · title 21:59 against posted 17:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309062159) = 3520101380e5773b5aad805377097913 (name+title)
GUIDs
36
Filler GUID seed
new Random(873).Next(9) ✓ verified
Run
Run 52 (seed 1,430,705,843) (seed)
Draw
55 · predicted N = 36 ✓
Machine boot
2013-08-14 07:34–10:34 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 2
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309062159 (name+title). Key = MD5(password) = 3520101380e5773b5aad805377097913, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d999b8e2-58ac-7268-9ea6-032650304598
  2 a6a09688-1c14-8e68-ae23-89ff0cebe037
  3 3f7c6462-798b-840a-9958-8848090c9caf
  4 ff01a913-19c4-815a-b365-7c25b4f24035
  5 da533f26-4f72-3698-9c94-3fe1052dd042
  6 f6599a68-53b8-4804-b4b7-70bce71885c2
  7 5b5b2661-a5df-0a2b-955d-0678df986c9c
  8 081d3030-cf7a-37a7-bfd5-06cb697f5acc
  9 faa522fc-9a23-8491-89ce-996bdba66fea
 10 725dd5d6-1633-1157-8c90-bebd0f0c8e11
 11 c5f5385d-83b7-45dd-a461-0fdd76dca34e
 12 898e0838-1b83-090f-911a-2c70e3d87d5d
 13 5fbd54d0-7ae7-6bfe-b89e-23ea6118d494
 14 09a49d40-0908-5a8d-b9a9-db9e1bd35680
 15 7ef43ccc-f819-0324-9352-9167c994f6f5
 16 82e85c5e-6055-2b0c-932a-0f61db4a7e8c
 17 3cc10c31-0c47-701b-8eb2-a258cd1fea0c
 18 ef41499a-0cef-2c36-9b21-81758943bae5
 19 a63d1b34-3d26-2f6d-b3b5-f4512c24b825
 20 b32fda8b-da79-3c8c-a7eb-1a5c20390cd4
 21 0ba8d5f4-c768-75eb-9aa9-2d34d6852fd6
 22 bd88cae0-a47e-0d70-91f6-fd2ed074759c
 23 ceca8ee3-c48a-49a1-85e3-edcceed603f8
 24 647c145f-db2a-0532-80bd-9929bf2c30ef
 25 822a4c9f-7f28-279e-ba95-ac1816336520
 26 e7cadafa-348b-05b1-8aed-ad3c310b824b
 27 e10b885f-f558-4fce-83de-ca970ac347ce
 28 2c62b498-70e7-57dd-82f3-f4a0f5f6a4b7
 29 642cf5a1-d5ee-6fd5-a0df-24cb7d4f5c7f
 30 62f41626-5d30-170a-9528-caff8f220dba
 31 df36c6f7-5dfa-4cc2-af79-4186fe0ae3cf
 32 3350912c-aad4-3b5b-aa47-61942797401b
 33 bea8e04b-9cf5-3f36-9c31-e0ff2a9312ca
 34 11ed49e8-41ce-76b5-ae80-ad9e932c116d
 35 8d5f1a21-4d5f-4953-8653-64d819890f5e
 36 fef6af33-c3cb-5b7d-a4e5-26c975090241

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 788834038140650272237040204561433745. Exactly this sequence comes out of new Random(873).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 55 of Run 52 (seed 1,430,705,843): new Random(1430705843), 4·Next(1,12) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-14 07:34–10:34).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs