A858DE45F56D9BC9 archive

201309151859 1mgm04

explained decrypted filler

seed 963

Metadata

Post ID
1mgm04
Title
201309151859 → 2013-09-15 18:59 on A858's clock
Posted (UTC)
2013-09-15 22:59:56
Timezone
UTC−4 · title 18:59 against posted 22:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309151859) = b592c28c5484ac523ec57d858805d3c2 (name+title)
GUIDs
28
Filler GUID seed
new Random(963).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
78 · predicted N = 28 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309151859 (name+title). Key = MD5(password) = b592c28c5484ac523ec57d858805d3c2, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e1100d27-5e27-7216-aceb-a224998ece48
  2 3441036b-4dd4-3f39-b7bd-7b07aa066810
  3 380c2e4a-eedc-8f5d-85e9-dfc1cd1a99f9
  4 db5d92ce-35bc-0306-8489-9afed3b809fb
  5 fd61a156-e1ff-8064-9c11-43e24fd5e2b9
  6 20e20eb4-6500-1a0c-98e5-4438a871c0f2
  7 699bcc0e-ab3b-3c5a-baf4-d88c25ca0715
  8 81bc248c-cc51-5406-8432-30ccbbbafcdf
  9 5a93d197-00d0-1708-8e74-f3cb08a4f9a2
 10 3e49263b-fbfb-30b8-bbbb-57e7c0d2e717
 11 99169c31-cc1d-66be-a8d3-ea129ae4f5b3
 12 b205db25-b143-2b2b-a816-6d9ba36f1188
 13 f4ed164a-985a-5073-a09b-bbedc7119ff4
 14 4c6e3e13-4377-4782-9c2d-ddb9e0bfe2c4
 15 d6014707-2666-0e94-b815-51b3b1e15200
 16 62789933-d1e0-30c5-886f-84afa286bf17
 17 5a03d6fd-1dc0-6b8b-aad1-f4d872e93998
 18 2be13391-1f76-08ec-a0b6-3af07bb4d3d3
 19 5cb3fbaf-3895-6285-9aa6-0a58d72054d9
 20 e5e47fdd-81b2-117b-a894-f2839911ed8e
 21 000e3666-fd5b-6478-bc1a-dc5091634d4f
 22 774e20f4-bef6-08ce-bf14-66cb72c321eb
 23 df9827ae-f4ba-6566-ab8b-d46533f98222
 24 afc7bce7-e90a-40fb-a18a-7894c8e6a641
 25 083d5e60-c875-0e4a-8ed5-88bd24219877
 26 60315912-abec-8c8e-a7fc-0650718b7880
 27 58bdce48-e61a-7495-a875-0e5536d204bc
 28 2527cd50-1b8e-3e27-a5db-3e2828cb9d37

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7380813513625403606160640873. Exactly this sequence comes out of new Random(963).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 78 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs