A858DE45F56D9BC9 archive

201309130759 1mb699

explained decrypted filler

seed 114

Metadata

Post ID
1mb699
Title
201309130759 → 2013-09-13 07:59 on A858's clock
Posted (UTC)
2013-09-13 11:59:59
Timezone
UTC−4 · title 07:59 against posted 11:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309130759) = 998cb7f38169e19b6a9778095653482a (name+title)
GUIDs
40
Filler GUID seed
new Random(114).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
19 · predicted N = 40 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309130759 (name+title). Key = MD5(password) = 998cb7f38169e19b6a9778095653482a, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 00926a36-6a3a-28bc-95a3-ca3d8e9e9b0b
  2 cc169020-97f5-29cb-b8ca-99c5802bdb24
  3 3f5275e0-13ec-4c4d-b4de-3ab52a05e827
  4 c44e557c-efd8-805a-81a7-939e98d0ab6f
  5 30f79725-799e-6e17-b2f5-d7d2beeb32cd
  6 82301c37-a95e-16ad-9411-4f50119a38ab
  7 19aaef3b-efd4-8329-906c-c127c8b7e81e
  8 c8175e64-b88e-5b40-aa87-4d9a82f9f66d
  9 f819c7ab-5dce-0eda-8ab1-b00175bc2e95
 10 4bf27a02-1f62-2269-a098-5affaf994cb0
 11 c8dc1d81-0048-2544-8cfd-1f0489661d2a
 12 ee096b39-1a8c-4751-b52f-cac9fb31fc90
 13 5dfdb9e9-6a44-05cc-8614-23aa5aedd033
 14 889a0203-0dde-7dba-b6d5-45438e2d264e
 15 62769674-ea7a-7e8b-b086-0a3bd3450660
 16 4916a19a-c1f9-27ca-a76b-8cd6ee3e033e
 17 3608afb3-b281-7def-878d-6d7f5bb04934
 18 fc045b34-a2eb-6915-9b47-4799a18f1712
 19 75f4a0b2-49c3-6021-a71a-e0da07a9ade1
 20 8ae928f5-4856-4d95-816c-c9f4374c644c
 21 63012802-333d-8122-8097-654b1ab7abe5
 22 76ca281d-4dde-7ae6-b08c-1f5328636f7a
 23 c1decd8c-10ec-2ba3-92ac-116e1d3d07ba
 24 5a106e64-c550-777a-a492-90e714c94f40
 25 a56f9367-e0ec-75b2-b4f6-9133c26b4ad4
 26 b9961688-ee6a-796b-9f73-501d0d572077
 27 190c129b-3324-8f4f-81a4-1d6afca2eede
 28 3bf8c073-3720-2113-af5d-d9d845d21d37
 29 4cbd8b63-5bcf-0849-b55c-87c11374418d
 30 65d1beed-c662-86cc-8755-9c15e4a29456
 31 8a1f65b3-ccf8-2948-a8a1-dfb6d3e9853d
 32 c26cfec4-b0f9-4542-b40c-7c9e3a2a885c
 33 fc587b3d-027d-1667-81c8-77d11739d844
 34 89910610-f85d-72c0-aa77-2b3f998626a5
 35 27e52f0c-f93a-413c-98bb-25fbe753aa03
 36 1938d7b4-0bc6-6b3e-9614-cf96ce9c2c7a
 37 0b0c229c-36d5-413f-9a3d-c29ac0be3bbb
 38 e149b5a6-a601-056c-a1d9-e0ca712ce9d6
 39 ba4c44ad-014a-737f-beea-7675b6f2ee9a
 40 76cca96e-5f8b-6f10-8524-06c5b6258da5

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2248618502240772766487277782082417464076. Exactly this sequence comes out of new Random(114).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 19 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs