A858DE45F56D9BC9 archive

201309151659 1mgcw3

explained decrypted filler

seed 54

Metadata

Post ID
1mgcw3
Title
201309151659 → 2013-09-15 16:59 on A858's clock
Posted (UTC)
2013-09-15 20:59:56
Timezone
UTC−4 · title 16:59 against posted 20:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309151659) = 2fd50e2bb3c361887e42dc69e332a7ea (name+title)
GUIDs
36
Filler GUID seed
new Random(54).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
76 · predicted N = 36 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
8 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309151659 (name+title). Key = MD5(password) = 2fd50e2bb3c361887e42dc69e332a7ea, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 8a60a68b-4b1d-8f57-afbf-0cec2daa555d
  2 954de9dd-cb7a-50ca-b7c4-a9c9432e2d62
  3 11aac1d4-627b-4cb7-804d-8325a114337c
  4 2a1a2887-5c8e-0a67-95a0-4257fe74b309
  5 5c996cd6-f480-5425-81b8-fd25116cbe86
  6 52081379-1f79-6696-8612-d0dc3f8dbcf5
  7 a5f39787-7979-029b-a9e0-022cc2a75215
  8 9faf7e01-cee8-4bda-b36d-d1223260f1d9
  9 42fb3286-ba33-51da-8cb5-15ec29608438
 10 8753e193-7687-1e91-9ae1-a212e01dfa2e
 11 b4cc05a6-c3d7-0695-b89b-d75f3a5b46c0
 12 cbe11453-6772-5c50-bc77-feed328aad63
 13 6a181d81-88e2-684b-8e85-92860f9a31a4
 14 c25f49da-6ab8-5cb8-9f1d-abb364254377
 15 ed85e14d-2b99-76f4-89d4-0f8e27358a2d
 16 1ebd14eb-929b-662a-b968-6db9ee133ea7
 17 17466890-9d36-5b1d-a30e-7406c0b1a138
 18 7c6b7481-27bd-4c7b-a13b-08350e4b811d
 19 af2c2b97-7ed1-109e-b57c-a51a956e8317
 20 fc32994d-75e6-2019-b9b3-d86ac38d1ab4
 21 8fe00a26-96ba-8cd3-bc20-9a5bf8ed2626
 22 d51edcc5-227e-0f53-ac60-0cae4ebdebbd
 23 a059e5c1-8afc-1eef-a9a7-75d38bf09dc5
 24 24ecd281-f0be-8573-a34a-26e61579d4d5
 25 24ad21d5-b56d-8c32-9cae-6859a302c6d7
 26 62136b6f-56ce-2f41-9a81-60ab92fcc57f
 27 41a01b0a-96c0-342b-b2ff-d13fffec36db
 28 a3c229be-f084-1c97-8de9-495732838942
 29 922957b8-ea4e-4edd-b8ed-2e7e0ed5c0f2
 30 3046de4b-cb6d-576f-83bc-222a8aa7e406
 31 b500081c-804c-10fe-b73f-37ac869160de
 32 63ad8d4a-efc1-681c-ba06-6ca33202824e
 33 cf9b5a53-40d2-0a77-94ff-8592c79e063c
 34 95cfd2e8-d80d-3724-b902-5d16d03dffac
 35 b1926e35-1c36-4359-9a56-eb1e97f1fcf5
 36 fdf9383f-3b62-09ab-8168-2f8aa4055d28

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 854056045105657654128018823145160340. Exactly this sequence comes out of new Random(54).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 76 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs