A858DE45F56D9BC9 archive

201309152159 1mh05x

explained decrypted filler

seed 827

Metadata

Post ID
1mh05x
Title
201309152159 → 2013-09-15 21:59 on A858's clock
Posted (UTC)
2013-09-16 01:59:56
Timezone
UTC−4 · title 21:59 against posted 01:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309152159) = 3858602b134d7decbfe1bd71ff779b4b (name+title)
GUIDs
28
Filler GUID seed
new Random(827).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
81 · predicted N = 28 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309152159 (name+title). Key = MD5(password) = 3858602b134d7decbfe1bd71ff779b4b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 f80a9356-43d5-616e-99de-b255468ca2d4
  2 ed29f980-a204-41cc-be3a-bc264613e3d9
  3 7e1eaddd-90a1-75ee-b4c0-6088d50d5410
  4 1e95f240-1346-0fa1-9a33-de9ff01572c4
  5 f7602e2a-399c-5591-9da5-39eed5857446
  6 8e8892fc-5efd-2ec7-976d-51dd832f4208
  7 85cc8151-402a-43cc-b513-2da4d95663af
  8 3233a7a8-3c8b-3d2d-97b4-d1ed1912c74d
  9 daa8d423-fa66-2b75-b45c-b4e66db5cbc2
 10 8d502a53-e785-213d-9a63-1888f729b96e
 11 faf57915-22e0-5b05-814c-5311b42754d7
 12 feee61f4-73c8-1659-bc09-a3a15b1e36d4
 13 12fde852-acc9-1f36-8c43-ccce352a491e
 14 03c8f797-941e-6a31-a1b3-daaf49d66156
 15 cfe59ca6-ef15-7608-97ad-75bd5c820192
 16 108ab359-5be2-4743-a857-7d2ab171dfb7
 17 c4356705-f9aa-4ea7-b4eb-ca4c02887cea
 18 ae90228c-912d-606f-915e-76e13e49a081
 19 169a92b3-e27e-041b-b687-8dd74c48cb95
 20 13529184-7cbf-4253-95d2-6ae5effba7c4
 21 59caa94e-55bb-60b1-b1fd-9b86e3fe62ed
 22 46a090bf-6d10-6384-8b98-0ce83252e8ca
 23 c921d1cc-a86e-6f9c-b0c0-f8e18859d6c6
 24 d71643f9-8e52-807c-86a8-a554a61111eb
 25 310dfc70-1b17-694e-a12f-f4e9aa578d40
 26 3906e80b-b15f-36e2-a4fe-3e09cefb2956
 27 042eb7a0-f1e3-8023-b5d7-d29bb8f48fe6
 28 f2c20238-ea3f-09bf-9904-7b51ed38b96c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6470524322511674460466686380. Exactly this sequence comes out of new Random(827).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 81 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs