A858DE45F56D9BC9 archive

201309070659 1lw7vc

explained decrypted filler

seed 466

Metadata

Post ID
1lw7vc
Title
201309070659 → 2013-09-07 06:59 on A858's clock
Posted (UTC)
2013-09-07 02:59:51
Timezone
UTC+4 · title 06:59 against posted 02:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309070659) = 044aba1598dfaa2e998b47d7d4dd6e2b (name+title)
GUIDs
40
Filler GUID seed
new Random(466).Next(9) ✓ verified
Run
Run 52 (seed 1,430,705,843) (seed)
Draw
58 · predicted N = 40 ✓
Machine boot
2013-08-14 07:34–10:34 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309070659 (name+title). Key = MD5(password) = 044aba1598dfaa2e998b47d7d4dd6e2b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 54f9a215-aa1a-118f-b09e-13763e0f1a4f
  2 44f8178a-b86d-4712-b0c0-43f48f1ad7fc
  3 ec913ac4-06c8-49b5-99c6-d79bff390042
  4 be31500e-e00d-0e5d-b316-b4d1991cce9a
  5 aaffe0a7-5872-5405-a769-9188f98fc526
  6 ea86f2e4-f3a0-7cc1-a273-d7c804d38587
  7 290ae37d-651c-6dce-b837-e709a1050569
  8 dceae0d9-99a0-2b5f-963f-5b51a8af2388
  9 7ad88108-30dd-5e3c-8f73-a76f00455a35
 10 db2b0bdd-c6e7-1a10-8049-35f91858583d
 11 ae99bbb7-d156-50f0-8e74-ddb4585fdc5b
 12 7692c380-c49f-24cd-bd38-d15397066c06
 13 9ec8a22c-eb5d-8855-b5d6-30acaac3c84f
 14 93bc4c67-8042-8018-9c39-3b3bb394201c
 15 ffb5b3a4-8b09-1d84-8b7b-229e44bf8dc3
 16 1b874485-806f-006f-9cf2-484bf23e8931
 17 fe8d1b5b-a728-6fc6-8f62-068703155449
 18 f38cc479-70be-8c4c-b168-97ecf27dab98
 19 62bd68c1-f271-2ca1-a495-323ad017a914
 20 7f8fb993-00dc-61a7-96af-c874fa956baa
 21 b1df3ba6-041b-6d04-a8ef-deefc490c56f
 22 516cf325-c47d-1d4d-b401-243904749a8b
 23 04226f4b-2cb6-67de-94ab-014cd8e3ddca
 24 91d0804f-b0c8-79e3-869f-16c6387c7ef9
 25 24587913-f0a1-3265-801e-162fbd5ff698
 26 7d3f2213-e240-2e9e-ac30-f3a7b1820644
 27 47adeb45-9756-5af3-8529-edfd81d783d8
 28 16e89f95-c1c4-3e44-989e-49e9e194b19f
 29 a3469652-6f1c-2668-abd4-57769000fbd8
 30 8742272a-b827-3562-b30a-3928bb355430
 31 41f5c60e-b8a4-2575-bc03-8f9e96d8741e
 32 5b12e857-2625-17ee-a309-812a87463530
 33 e55a11fc-496f-69fc-b550-3512c52159fa
 34 c8b143cd-c6e6-697f-91d9-04c25cbf99e6
 35 9fa20a27-5493-3ba4-9558-4e16c7f890c3
 36 cbe03a41-af32-87a9-a12f-68301606df81
 37 07886916-8889-0752-a236-31f9bb7bc73e
 38 bf785845-b21a-8e4d-a675-71e9b4cc3a91
 39 a59edbfb-14f4-15d9-940f-02e05057e60c
 40 2b67ccfc-2861-477c-8d66-5c1f55d19dd5

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1440576251528810682661673253232166380814. Exactly this sequence comes out of new Random(466).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 58 of Run 52 (seed 1,430,705,843): new Random(1430705843), 4·Next(1,12) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-14 07:34–10:34).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs