A858DE45F56D9BC9 archive

201309130559 1mb21e

explained decrypted filler

seed 158

Metadata

Post ID
1mb21e
Title
201309130559 → 2013-09-13 05:59 on A858's clock
Posted (UTC)
2013-09-13 09:59:59
Timezone
UTC−4 · title 05:59 against posted 09:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309130559) = 8d06cb538379cc94c7348a1bda7832ac (name+title)
GUIDs
32
Filler GUID seed
new Random(158).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
17 · predicted N = 32 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309130559 (name+title). Key = MD5(password) = 8d06cb538379cc94c7348a1bda7832ac, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c2faa2fe-54e4-235d-a44f-37a16843cbb8
  2 252fdc04-d2eb-1761-b739-be532aeb30c7
  3 b7be88b5-3a0b-1a3a-b5ff-7c6bfff0edf0
  4 a469e13d-71a7-20b2-a07d-4120d194f7c5
  5 b0eef92b-fff8-4c4f-a49f-96839817d4b4
  6 c3bbb3ae-5a91-50f6-9907-af05a8efe4f3
  7 1426a068-f8c6-67dd-9659-7faa51158c87
  8 a77f107f-a1f3-6161-a0da-3d5cc83b8246
  9 f2330796-e73f-41f8-8eb2-e315f49312ec
 10 b4e44fe2-7d81-452e-b8bb-eaa6a528457e
 11 cef1f743-fd7c-6337-83ee-75d910a50a5a
 12 3da85b80-f83e-702f-9bc5-7384fd5ac25a
 13 34c3fea1-d780-2b60-bba7-148b502b346a
 14 072ff570-3b53-6dd6-9fdc-f2435bbc240e
 15 01844530-660a-53ae-aee9-dab1e9e02a42
 16 5dbf6f32-59c9-67cf-9244-5b631f14845a
 17 102ea9c3-d8cc-2654-800b-fbb6785285cc
 18 1617fadd-aab7-837c-9322-b984489e98dd
 19 b4b39701-a3b6-8e29-bf14-ff50340b392d
 20 bdb1a3a1-e8d9-4cbf-ac4e-a7dd81cc5e4c
 21 528ec32a-005f-7fee-88a2-b49f32ae8f75
 22 d407eb95-8efc-5ddd-90be-87f20acd68f0
 23 9b0245fe-061d-679b-9ae9-9cd756ab920b
 24 75d474f8-8808-23d0-becc-be8ff1d7e1de
 25 d3228eeb-60da-134e-9fc2-77b0e864be20
 26 c5e387fb-a983-118f-852a-904a8eca8f39
 27 5488ebb7-217f-6da6-b394-f7950792a308
 28 134df362-3a3f-5ca7-b5d7-0383108e6de0
 29 2f8b8137-1122-114e-b4ae-2ac7e516446e
 30 3c1758fe-41c9-2d51-a6d4-bcee3981e808
 31 d168ea19-1351-4b77-8a60-7a85324d71ec
 32 fb25af6e-ec3d-0267-9d14-c0ef143478a9

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 21124566446726562884756211651240. Exactly this sequence comes out of new Random(158).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 17 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs