A858DE45F56D9BC9 archive

201309150459 1mfbf4

explained decrypted filler

seed 760

Metadata

Post ID
1mfbf4
Title
201309150459 → 2013-09-15 04:59 on A858's clock
Posted (UTC)
2013-09-15 08:59:57
Timezone
UTC−4 · title 04:59 against posted 08:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309150459) = e4c6429defd41cad22a47be9ede7ffa7 (name+title)
GUIDs
40
Filler GUID seed
new Random(760).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
64 · predicted N = 40 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309150459 (name+title). Key = MD5(password) = e4c6429defd41cad22a47be9ede7ffa7, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3f744d7e-808c-6406-819b-0994a19c2212
  2 a5e05d0e-b2ec-7dae-a676-cddeac769802
  3 de331e63-e9e9-86fd-9b41-9b47ff7b0560
  4 491629df-d594-6afe-adc7-f71724b167c8
  5 db2f048a-0776-3900-8430-63575221a10a
  6 2edd5c1b-a475-6720-92ac-f8f1680f63af
  7 7f8e8a3c-4d13-345a-a7bb-6906dad9b3a5
  8 6ccd0062-5af0-658a-bd30-421517465c42
  9 09b41c6e-69d4-085e-9251-f08d37a5e965
 10 4423688f-5827-4036-9975-b4ecf16a609c
 11 5ba45374-bf9b-12c6-98cb-9330a38dc707
 12 88e243fd-62f4-7792-aa9c-c9908918dc5f
 13 50e564e3-8c52-07e2-8bae-225c33b472fa
 14 f2c00cce-7585-71eb-97f4-665cda049d2b
 15 79bbc370-ae09-8631-9d87-b5d6373b6e25
 16 270e2b9e-0228-5357-a619-a321cba4c0ce
 17 771abe7e-0be9-3f66-ad65-02b7370d9756
 18 0d2345e3-984f-1940-a29c-d185c65c26e0
 19 6d72db8f-1d4b-2734-b4cb-557cc3e1758b
 20 ab5ccb79-20a4-534e-97f1-bdde4df9ad1e
 21 00619113-be2d-7800-9788-eeed2bcfb848
 22 318f79de-cd1d-20b0-8504-560122c5ef47
 23 4b1c2a7d-c993-3bcb-baad-c4b4dc8b9c9f
 24 3afb8e5a-7a36-4181-9ff4-7066275f9f51
 25 4e189e1b-a69a-1156-b8a3-37da02eb5c83
 26 86dc42a8-a726-3c8c-bea2-974ba98b4494
 27 1e669341-a9b9-3edb-b54e-360b710ce4f8
 28 5777e3bc-8557-5bea-bb0e-a6c2d5e66256
 29 d69bfd57-0d60-4472-ad2c-e1b3f128a968
 30 e2701326-69ea-1ccb-863d-d3550a941c0a
 31 a21ca518-e61d-6fce-9ba0-a736cc24af45
 32 5c70f134-b88f-55a7-9aae-66fee528045d
 33 18d7d06a-be17-806b-b2d5-24d431259df5
 34 e3cf5860-c497-059f-967d-a044f312f6b8
 35 7fec165c-0a04-0b03-8daf-fa8127cb6f99
 36 1c745e6b-99ba-6a1e-930f-dc5a99cdc967
 37 6ee0bc95-eef2-51b2-81ce-b21396c9992f
 38 6d729ed8-d83f-2bd5-8d96-8ab6b833b75e
 39 f6b60391-7a74-4b85-8f35-1c0a21a6aa8e
 40 c7eb399f-0792-4f2f-8c23-744434ce02ae

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6786363604170785312572341335416580065244. Exactly this sequence comes out of new Random(760).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 64 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs