A858DE45F56D9BC9 archive

201309160359 1mhlrr

explained decrypted filler

seed 461

Metadata

Post ID
1mhlrr
Title
201309160359 → 2013-09-16 03:59 on A858's clock
Posted (UTC)
2013-09-16 07:59:55
Timezone
UTC−4 · title 03:59 against posted 07:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309160359) = d1ff3fc55790b59b63bc4cba041bbde0 (name+title)
GUIDs
36
Filler GUID seed
new Random(461).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
87 · predicted N = 36 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309160359 (name+title). Key = MD5(password) = d1ff3fc55790b59b63bc4cba041bbde0, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a724659d-9095-5f0c-90af-2ae9b600133b
  2 4527cf74-441c-0b9d-b796-206775adec27
  3 733177d4-d590-0555-85e0-e1f4d77dccae
  4 89b0c724-c3d7-8c4f-8b97-00b2fa6e64fa
  5 a5b82c04-152a-3b88-9fbd-f0b2781c737a
  6 e94d60c0-a0e8-3dcd-8261-bb5000189a98
  7 05b2da5a-206c-4cdd-9a1e-8ad658b2a33b
  8 ea03c4bf-8c41-64b7-99e3-861e1f919109
  9 28478167-bf67-0789-a7d5-c151aaaa71d4
 10 81acc908-507f-2ade-bcb8-c1a3ae640df1
 11 a5ddf7df-2efe-885f-a42d-2204578ead4c
 12 7cdb06dc-ba7c-3a30-95a0-1cb10946dd62
 13 3bb5e5a3-22d1-4cdb-8906-604ef0c8bf47
 14 1275d3d3-ea85-2c9f-9c35-942976fdf1fe
 15 a0ef0b69-f8cb-65a2-b973-a6963e4564b5
 16 aef5e75c-8084-83cd-b93e-ff1d8db6acfe
 17 812cdfec-2926-5a06-85e6-937c4ccec020
 18 d8261e44-d5ea-7bf0-82f1-877b9194501c
 19 26feff04-0738-1927-9f82-15645fd36505
 20 fe2a0b69-4c19-71bd-8f3b-1787c1e9229d
 21 0b6f3df7-ebec-04f1-afa4-32638204ce50
 22 a6130d79-ce7b-8970-8779-09dc591f7faa
 23 88781284-5409-8eb4-ae89-f7df45f5b2ee
 24 d3679e36-1673-055e-880b-0b04b9a11ed9
 25 047c2de7-5f03-77b6-aa26-64e72b8d4550
 26 a34c6c11-b5d1-051e-b25e-1f21af29475e
 27 f0088e7d-3909-2882-ab84-461a5f333d98
 28 78555aa0-ed79-2b18-94b4-4bf7861745ad
 29 efed2e24-a2bf-73a6-b33c-dacf796bacd2
 30 c3aa7a86-21d5-3d78-8c8f-4a7f97ee4b28
 31 6d564b70-d319-39a2-b79a-686cf499bcc1
 32 f500659a-a9a5-7a99-81c4-c42319cc2612
 33 5732fea4-65f1-6294-9d8e-6756aeca267d
 34 7729d740-6873-4071-b0aa-945ece504fc1
 35 098e5d97-a380-503d-9ff3-3f086062a2e3
 36 d9a3445c-2b26-61ce-94fd-40889b04d179

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 500833460283426857170880702273376456. Exactly this sequence comes out of new Random(461).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 87 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs