A858DE45F56D9BC9 archive

201309121559 1m9ngz

explained decrypted filler

seed 868

Metadata

Post ID
1m9ngz
Title
201309121559 → 2013-09-12 15:59 on A858's clock
Posted (UTC)
2013-09-12 20:00:03
Timezone
UTC−4 · title 15:59 against posted 20:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309121559) = 133cc80e9324abb443f85aa3b933e371 (name+title)
GUIDs
36
Filler GUID seed
new Random(868).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
3 · predicted N = 36 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309121559 (name+title). Key = MD5(password) = 133cc80e9324abb443f85aa3b933e371, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 03996eb2-2e09-1801-ae13-07e75ebb079d
  2 2517376a-33e9-4e7a-b845-fdb644fce211
  3 c7672e01-b36a-4d24-bbfa-b9523b75c3ba
  4 a89e72ee-d5c5-7b13-96b8-a2cbd7f9ec6b
  5 a97d2160-952d-06ad-a7a5-9bba34210802
  6 ae719255-d8af-0810-93ca-387347efe3e2
  7 9cd41a5e-29cf-7b7c-a5e7-6b266a0182ba
  8 a33a0e6c-3607-84de-83d1-b024d1fcc55b
  9 aa9614a9-9553-3f0d-955b-c17a11fdf1d2
 10 187dc83c-54e4-3dba-84ff-cdc939eb6d5f
 11 20837243-8523-6817-9afd-e6d7656cbe9b
 12 0eeb7fb2-3df8-1dfb-87ae-2988e26f48e0
 13 97a0d73c-2cbb-33fd-91b8-6c2760f44f84
 14 d9374f7f-b565-0ad0-9669-567b8ae878e6
 15 f96a92a0-2586-5418-a36f-169a20df714b
 16 492ce0d9-2273-1c91-876f-8c1bb30fef45
 17 59c15753-cd2e-6dc4-87cd-495adcc010cf
 18 04e1db41-9aa0-100e-86b3-f16a56d1817f
 19 8be63408-6eca-123a-8487-c5b61021e80a
 20 daad7432-a993-3280-8b73-bb0ac9459e0e
 21 89b7f221-dd7a-1be5-aa95-84d284c48cfc
 22 6def0830-68eb-7fde-a889-3a11855d1574
 23 dcfa0f3f-8bb7-6a77-9995-79b782ac297c
 24 3cc2ab94-8cc8-2eee-8eb6-aa109ddfb2a5
 25 208952a5-4b37-659a-883d-c10ecb614744
 26 45169950-7b19-7a3d-9e56-b05e50762ceb
 27 ad19a7e0-e515-14d3-b33c-6a9ec43aee66
 28 ed4dae19-5051-44a7-bf14-9a8c5880021c
 29 711b4dad-c088-292a-8079-8ac37fdeaa96
 30 eb805d9c-dbbe-158c-b237-cab6d1aeeab4
 31 06aefc6f-e248-5aa2-ba84-a82d50c137d9
 32 15340104-c893-0188-986a-3806a1de1709
 33 6fabb3e7-6d69-3ec4-9a8a-e5b37082744d
 34 bd2a2135-47a7-6b8f-aa32-8a734a6143bc
 35 630fe465-71f6-6f7d-ab1f-1bd29c884110
 36 c63f45d4-479c-327a-8339-731e58a11550

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 144700783361305161131762671421503663. Exactly this sequence comes out of new Random(868).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 3 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs