A858DE45F56D9BC9 archive

201309130859 1mb93d

explained decrypted filler

seed 61

Metadata

Post ID
1mb93d
Title
201309130859 → 2013-09-13 08:59 on A858's clock
Posted (UTC)
2013-09-13 12:59:59
Timezone
UTC−4 · title 08:59 against posted 12:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309130859) = 440fc298777eed242575aa1a0e7072a5 (name+title)
GUIDs
32
Filler GUID seed
new Random(61).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
20 · predicted N = 32 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309130859 (name+title). Key = MD5(password) = 440fc298777eed242575aa1a0e7072a5, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ed0aadfd-e249-5381-aa17-c0ba8a6c2e43
  2 3ca05dfc-26a6-67bd-8133-e0eb615dfcb3
  3 da0fa7b0-4244-3cf5-8416-440e316e8757
  4 61bc4588-a095-56d3-9286-6c973a732824
  5 2abe4732-53d7-6f7e-8915-faf3db224cd2
  6 00b800d5-a8fa-7775-8556-05ee75fc4b30
  7 7c464e33-7601-2ae8-a15b-7dbba4da272d
  8 cc409320-ec5f-0b20-9456-3bec56495234
  9 e89f4a47-055b-41ea-bd10-05c19b68d530
 10 2a90080d-76b1-61b6-a34f-a3336b652ec0
 11 84faf090-eb6a-28aa-bdfa-a515eb860a46
 12 44d03573-caf4-0b0f-a371-949a58076f2f
 13 ab7de97f-7f26-59a7-9522-ec5ce516c9f3
 14 a21afadb-d329-1e7a-a4d3-2ada619ef0d3
 15 9c7a34fd-bbb5-6564-aaf3-572b3d6d8078
 16 caa86ae0-c4f5-150e-9374-575dfc37ead7
 17 9932a16f-1204-4cdc-89e8-aee96ac3c83e
 18 80206479-24e9-73af-9145-971be85fbca9
 19 e9e245a6-2e0f-2db2-8f86-aefe4e96b11f
 20 11dd23a6-2f10-83eb-b5d8-237bf61949b7
 21 28bad904-4f26-8323-9b3b-0cac5104dee4
 22 746bf256-0961-7fba-995a-a98dad306c5d
 23 b159f79f-da01-27de-af3c-5ef827d61d0c
 24 a32f7463-0c8c-3008-8c99-7dcee60c7a57
 25 7c61b5c3-2f66-65b1-a146-daa95f2952b7
 26 1df7c745-8681-6603-9014-a73b5629e04b
 27 e4771753-2ecd-3052-8e28-160d130b53a7
 28 f6cdfdbc-b1dc-464f-9dfb-ca8126c64fec
 29 84d19d20-cc6a-3e3e-a198-fe6008706a7e
 30 e57c8d7f-3acc-1d95-b3c5-b4ebfd125c61
 31 0b7e3c7b-303f-663a-8e91-3c455bdaed8a
 32 aeb8a5a7-5db6-4b5c-b593-da63834f3b92

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 56356720462051614728872366343164. Exactly this sequence comes out of new Random(61).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 20 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs