A858DE45F56D9BC9 archive

201309140459 1md9ui

explained decrypted filler

seed 11

Metadata

Post ID
1md9ui
Title
201309140459 → 2013-09-14 04:59 on A858's clock
Posted (UTC)
2013-09-14 08:59:58
Timezone
UTC−4 · title 04:59 against posted 08:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309140459) = 0920e46d122a417aa9b0b51182855b81 (name+title)
GUIDs
32
Filler GUID seed
new Random(11).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
40 · predicted N = 32 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309140459 (name+title). Key = MD5(password) = 0920e46d122a417aa9b0b51182855b81, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 670c8975-244b-45f3-919b-2badb06bc9c0
  2 87917d4b-b8d2-08f9-b5fd-9aeb2e91c9eb
  3 a023bb5e-7ec9-4ece-bf0a-48d75eaa6ae6
  4 e9445474-505d-896c-aba3-cfcbe4ab15fd
  5 f9ece92c-9358-1229-9e9e-48aa63728f24
  6 658be6c0-e41e-1fd3-b6e7-8523c260617c
  7 f1535454-0102-71ba-a868-e9df5a20fa83
  8 a6472ca7-eb61-8f11-83e7-11211aaa05e5
  9 646ec0fe-eb67-339f-a29d-62b5c95f408a
 10 a8c214da-8b5d-2640-8c9b-6363f65e0a69
 11 95f96da1-08a8-35b8-ab7b-3daca34e58fc
 12 ab10b614-73b4-04f4-8b86-998f0c890d9a
 13 54242336-863f-1ba6-ab89-c41de9ad32cd
 14 d9124ea9-dbc7-1e7c-bea4-a051fe5c349c
 15 ea4bc3ed-3e67-6f69-a017-0f80bb5c98fb
 16 5b4213a2-d434-84b0-9be3-722894a5064d
 17 520e144c-71be-456c-907f-e477aac6d215
 18 36bf4766-78ba-7440-80e9-0414e469c90e
 19 b92af51e-e881-8b56-9996-0926d6b7cb96
 20 2cce7948-fbbf-5909-99df-13f3a1537616
 21 869fe76f-242c-29f1-bc4c-71cc5c2b595c
 22 041e78a1-b456-465b-a9c8-bd6e7a211a3f
 23 99293713-eba9-702c-bdf6-5294809ffa8d
 24 3befc3bf-487a-76de-9b45-c13d1c8b277f
 25 025773d2-022c-7a47-86eb-5a3967ae18ec
 26 28c15e0f-e55f-5c05-9679-f084ddea7faf
 27 145ad0ad-2a2b-324e-a93a-52f6a78e1862
 28 909571a0-b995-4167-8693-eaf4b8dfe802
 29 4faec10d-c0dc-5912-9547-23b151381f39
 30 9f3fa2ac-d328-89c5-92ca-5941efccbd5c
 31 73212dff-6c47-2d0c-882b-883af6dee83d
 32 78da8e34-9c39-3308-b3f7-01c39da7d768

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 40481178323011684785247775345823. Exactly this sequence comes out of new Random(11).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 40 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs