A858DE45F56D9BC9 archive

201309121959 1ma6p5

explained decrypted filler

seed 752

Metadata

Post ID
1ma6p5
Title
201309121959 → 2013-09-12 19:59 on A858's clock
Posted (UTC)
2013-09-13 00:00:00
Timezone
UTC−4 · title 19:59 against posted 00:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309121959) = a325a6df078e1fd24aca8ad40cb9d1a0 (name+title)
GUIDs
36
Filler GUID seed
new Random(752).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
7 · predicted N = 36 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309121959 (name+title). Key = MD5(password) = a325a6df078e1fd24aca8ad40cb9d1a0, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 1e8a7fee-b955-5fe6-bb0a-2ccba276cd0d
  2 4791dcac-ae7e-421a-a0a2-bdc4f1af7eaf
  3 b8315143-90c1-3214-8b99-33519feff3f7
  4 43b0bcd2-66eb-0c52-8558-581e9898f0dd
  5 c69f36da-1672-6e7f-b0d8-d81a37514ca8
  6 c3c90c2d-5030-6359-a8fa-719547587a23
  7 de562162-19e2-7400-8b36-e74c51eef251
  8 f77c6c15-e611-6e44-88ec-56746936c9c9
  9 e20c1f77-5b70-05da-83ce-8fb7e078a0b9
 10 9b935673-fadf-52e3-8532-a8235a47c2fc
 11 19018e60-097e-274d-b64b-da93d2b69a30
 12 24adea88-fd3f-5540-b31b-2b5ccfd1ee24
 13 55713b92-9ce8-5e0c-aa17-a54ba0d5b579
 14 3f7e2388-6de9-67c0-a57b-6a97397dae35
 15 d1ade677-be5b-3679-9e47-fd0f2e4bde98
 16 d34c11dc-f075-6836-99e0-efdc73845dfc
 17 71583ac0-79ac-8208-9495-02ca5d1bf645
 18 c2e415e7-d7ec-28d8-b8da-a5a8395f8fa1
 19 768723d3-6f02-0283-85a9-7cf0ba2bd981
 20 109a5b7d-f408-463e-bd60-d6fc3c95daf7
 21 f5d48d78-e5fb-62da-9c09-cfd5cf497413
 22 d3285863-03c4-378c-b374-fdc5b3b12cc8
 23 730f1f0a-cd89-0db7-a302-843ffe080bdb
 24 d43225e9-0ea4-600a-af68-d872c01d541c
 25 03e8a2a5-553b-36a3-8786-a3ee168893d7
 26 a1a00bf6-496c-1ce9-a37b-2f229a74d0d5
 27 5e0bead6-9ba5-4b19-ad0e-19992f9b2ea0
 28 93333ba3-613d-5956-a57a-e2d318035191
 29 c061398e-fba9-28db-adf5-a4389e3f428c
 30 04f30063-e53c-6769-8f8e-6e834e4cb07a
 31 5d04f15b-6389-757c-91b3-3d47e452c1c2
 32 27c1894f-a726-461f-9699-8b290c259152
 33 8fe70d5f-85d5-6cdd-9ce7-7afb75cc79a3
 34 17ce4798-af88-7f96-8cd3-013c27ae1207
 35 9b49371e-9993-2101-9360-4e4fdafaa509
 36 30ee428b-999b-3ced-ab7c-d5dbbfbb4fed

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 543066760525563682046306314526746723. Exactly this sequence comes out of new Random(752).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 7 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs