A858DE45F56D9BC9 archive

201309160559 1mhq07

explained decrypted filler

seed 305

Metadata

Post ID
1mhq07
Title
201309160559 → 2013-09-16 05:59 on A858's clock
Posted (UTC)
2013-09-16 09:59:55
Timezone
UTC−4 · title 05:59 against posted 09:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309160559) = c490ac9fb1a00766932d6f0597060851 (name+title)
GUIDs
28
Filler GUID seed
new Random(305).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
89 · predicted N = 28 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309160559 (name+title). Key = MD5(password) = c490ac9fb1a00766932d6f0597060851, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a6c39615-acd9-0f52-b840-5b7b42d44e52
  2 a48da773-ec32-2c49-91a1-2e07932aef60
  3 954c2a85-1532-8e50-946e-4c0413164a65
  4 a676b63f-d4cd-538b-b811-ee019d416814
  5 1daa2894-939f-8b15-82f7-4ecb83079ee6
  6 b52cd4d6-ad6d-09c9-9878-43bf74e7f8b2
  7 3652ac3d-89c0-57c9-8a1d-2bf8e51630e5
  8 acf24c3b-08a4-41d8-89bf-009037ee0ffa
  9 260b7de2-2920-6256-ba43-40387c36c53b
 10 c496f82c-61ea-6e0e-ad11-85a499ac50fd
 11 3c3dab42-56f3-8c34-9a36-f676a5dc28c5
 12 d7169bc9-ed97-5e51-b99c-757f8d0d1914
 13 f8b7b04a-a839-27ec-99d9-fff9adb7be79
 14 1219f0d0-73d9-15b3-9ae5-4ee3e9252776
 15 f0697c33-ecc2-4ad2-83b7-ab07e1b08e15
 16 a038b3f5-3eba-41ef-9abf-fc9ecff7a8fb
 17 40077d69-9cfa-02f4-80fe-9bda38d498b5
 18 6d298d3f-dc93-0cca-b23c-55c7682a0db8
 19 c52cdad5-8541-8e6a-a314-f65250c1a228
 20 5810e64b-e7d3-3a95-ad0d-753241b60a62
 21 21311ac5-54b9-3739-8a62-749b19f721c1
 22 9df6c909-422d-6ca0-ad30-742609bc2168
 23 d7d53990-5ed8-468e-a035-0faf96668bd5
 24 7f64b6ca-1099-5f77-a6b5-fc5fd6686083
 25 eee6d49d-e0cf-5544-a741-edb871a8ccee
 26 da322f39-6bdc-67ab-873c-32630b85a7b3
 27 362bfefa-a18d-136e-8715-451d602c680e
 28 c80219e0-13dd-6355-bd05-850252e4522b

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 0285805466852144008336455616. Exactly this sequence comes out of new Random(305).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 89 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs