A858DE45F56D9BC9 archive

201309091259 1m0v2m

explained decrypted filler

3DES(name+title) ECB, 28 GUIDs, seed 1

Metadata

Post ID
1m0v2m
Title
201309091259 → 2013-09-09 12:59 on A858's clock
Posted (UTC)
2013-09-09 08:59:49
Timezone
UTC+4 · title 12:59 against posted 08:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309091259) = 8bb2be04f02ca9eb8e9c7ef8fa98887f (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
28
Filler GUID seed
new Random(1).Next(9) ✓ verified
Run
Run 52 (seed 1,430,705,843) (seed)
Draw
76 · predicted N = 28 ✓
Machine boot
2013-08-14 07:34–10:34 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309091259 (name+title). Key = MD5(password) = 8bb2be04f02ca9eb8e9c7ef8fa98887f, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e54e37b5-3b72-2a8b-9531-0fe9e537126f
  2 a967a861-37ce-0c6e-81c6-e4484d1bd5c4
  3 e2fbfbe3-da19-42de-83ff-4d7fac40c22d
  4 a5284238-9218-6246-968e-5fb850ed72ae
  5 54ea3d13-b6e4-5c26-b6e1-3e066b9deadc
  6 61209583-c2ac-3a6e-9f5f-2c3d06d85dcd
  7 e0d98db3-c757-3ebd-96ab-7f9fd3beaf19
  8 2532dd68-ce40-847d-ae4b-150ec1305ac6
  9 cadb0a6e-5281-037e-8edf-11eab1c44249
 10 e612ff6f-7bb3-59e1-bfe8-90e10e7556fd
 11 16c0a05e-c12f-0ced-ae37-20de9964defa
 12 854e70c1-f767-2ef9-af82-e7f81293f986
 13 7c1d3767-5b0a-2212-894d-5e2f3c772fcb
 14 7306bc48-a400-8f99-a430-6c1157afc453
 15 03ff5924-cf09-65e0-8c0f-ec81f8dc1816
 16 4e0f272f-6e1b-5693-a53d-000acc882025
 17 d53bdeda-1b67-29ab-ab63-3cabbaf1ff45
 18 39def2e8-3a4a-5e2f-bb08-2fff15b0fcb8
 19 a3ec457c-b828-6b25-bebb-ed4680aef0be
 20 57d48395-0569-6bdf-a09a-d6b7d271972f
 21 2357cc2d-afe5-842e-9b23-c923a0200c98
 22 480443b6-5189-06b9-a4d0-e7c1a0114d89
 23 fa2f882a-e6c1-1798-941d-0c657a49c31f
 24 a70d03d5-4926-3016-b335-94256261b06e
 25 43ed553e-6432-78cf-a474-e08e563e41e2
 26 d23f028b-54ff-1165-857e-4b11eb49250e
 27 dec3e362-cab4-7df7-a9a8-68b6ecfae091
 28 3743aff2-6a25-2248-a7df-d4e7a8d6c10c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2046533805022865256680137172. Exactly this sequence comes out of new Random(1).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 76 of Run 52 (seed 1,430,705,843): new Random(1430705843), 4·Next(1,12) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-14 07:34–10:34).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results