A858DE45F56D9BC9 archive

201309090959 1m0ond

explained decrypted filler

seed 135

Metadata

Post ID
1m0ond
Title
201309090959 → 2013-09-09 09:59 on A858's clock
Posted (UTC)
2013-09-09 05:59:49
Timezone
UTC+4 · title 09:59 against posted 05:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309090959) = 94ed5f15b569f32c4cf39a2ac44b2374 (name+title)
GUIDs
32
Filler GUID seed
new Random(135).Next(9) ✓ verified
Run
Run 52 (seed 1,430,705,843) (seed)
Draw
75 · predicted N = 32 ✓
Machine boot
2013-08-14 07:34–10:34 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309090959 (name+title). Key = MD5(password) = 94ed5f15b569f32c4cf39a2ac44b2374, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3f43f802-d068-2af6-9832-b3d19e0b6e50
  2 2a60e686-6952-3819-a63f-2c1eee931be6
  3 a4827176-691b-1b6f-acf8-d0dc1da8048c
  4 82bcddcf-1926-350f-9a20-a439861bc7d3
  5 26ff435f-139a-1fff-a573-cd7936a42d45
  6 4cd522f5-e00d-4ebd-8fc0-9862962194c7
  7 3b6030cf-9434-393d-a02d-8b25fe59406a
  8 805722d4-102d-134b-9024-5388f8138a2a
  9 3b8d2aa5-b809-69bd-bfc1-9852271b8721
 10 fc4676c1-679c-09d5-b70e-2600b827a5a8
 11 fac41b16-b2bf-67d4-ba36-fe6e9c69ab82
 12 bdacb8a9-2ac5-7ab3-984f-0059bef17aac
 13 39fcbe74-9390-3e73-b7a9-2f35202172d6
 14 33717301-7aac-6e08-9900-3d2033c1695e
 15 eef3b1c4-4d38-47cf-a664-dcb9961a2612
 16 29962aaa-f5aa-3956-8d7b-93f3d21c3e9e
 17 c6725cc0-897f-5ddc-8d70-f858cc307061
 18 a7a41bdd-181b-6791-b906-4a2be33fa318
 19 77555353-4d76-29c4-9e9c-fb1571eacc70
 20 3c145633-e131-554f-8e2b-812ad669db22
 21 838183c1-644a-6970-bc4b-6b64767718d6
 22 8c158413-3a14-894d-bfc2-a4e5a849da2c
 23 f4bda3d2-7fbf-7228-885a-71d44c7554ff
 24 aba2d7f3-99ce-14f7-864e-f6939c109c08
 25 4beb87bb-7a97-8820-88c3-9bcff88804a5
 26 ee55fe2f-f6ba-30f4-ac6c-8ed87fae4cf7
 27 3a01c320-1fb8-070f-bdc9-600ccf4d1d38
 28 a13f4be8-6fa0-3f2e-8f33-99b89b3e3f61
 29 39723193-cd3d-7a1a-b151-664d8e7262cb
 30 7deea966-1af3-7401-943e-5f5ff68329b4
 31 24c08bae-8227-010f-ac84-0630757af48d
 32 d64ce8e8-7d88-0a6c-8a20-7fb4afe7c712

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 23131431606736435625687183037700. Exactly this sequence comes out of new Random(135).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 75 of Run 52 (seed 1,430,705,843): new Random(1430705843), 4·Next(1,12) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-14 07:34–10:34).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs