A858DE45F56D9BC9 archive

201309161159 1miadm

explained decrypted filler

seed 66

Metadata

Post ID
1miadm
Title
201309161159 → 2013-09-16 11:59 on A858's clock
Posted (UTC)
2013-09-16 15:59:55
Timezone
UTC−4 · title 11:59 against posted 15:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309161159) = 47614247e40ee3b9ecae5e622e8fec8b (name+title)
GUIDs
40
Filler GUID seed
new Random(66).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
95 · predicted N = 40 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309161159 (name+title). Key = MD5(password) = 47614247e40ee3b9ecae5e622e8fec8b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 67995a4b-242e-1c70-912d-d7c85e38b91d
  2 8ad4904a-a782-1523-8dab-da2d5b9dab93
  3 f013cff6-9efb-8f3e-855d-b8b3fdb81d62
  4 27094876-3187-55e3-9581-a3760f41c56e
  5 96952d54-ac46-0afb-a175-6818dcda91d9
  6 24c2a000-2d89-2e30-b2fe-1ce6b7d33332
  7 a6c710dd-273c-44d1-91c6-aee929fdd8ac
  8 da97d1a5-7fca-44fc-9bda-e250a7ff77aa
  9 fb2fc615-3dda-1c28-947f-7dba7d283f71
 10 67c65645-50ec-5f41-bba4-b0c15a4af466
 11 29c2b653-d5ff-8fa7-846b-dee27cb6c964
 12 7c991be8-f3da-8691-96a1-7c56dad7da7c
 13 7e29a28e-8abc-01b6-bcec-3c458ce58f59
 14 191d13ef-f1bb-7d35-8202-0151938d1801
 15 08aa119b-9e15-1372-affb-e4bc615b14d0
 16 a0e5d4ba-0dd3-2416-94de-b333a3b42979
 17 db1374c9-604a-5da5-a240-18946b534adc
 18 df92d951-554e-8208-b4f8-2d2b5d836271
 19 32761329-6199-45fe-83bf-5db7b803b280
 20 261e45be-a66d-7bdc-8dcc-7a5e4d69ce17
 21 bd6bd852-a032-532a-8b1a-86ac72ce5559
 22 c66276fb-b580-0897-adc5-c5ea18efe209
 23 e4d0dcfd-f4e0-122f-9d5b-752a591b3b29
 24 2fc1c2fd-dc12-0755-beb9-bb95ee6d9754
 25 1f78d560-5308-1a66-9ff8-6f70bfacc137
 26 5e5215f1-3ade-83b6-88ea-1d5fd80c7451
 27 33b00ce6-743a-656d-89cc-88babfe92f56
 28 9146cedc-0e89-5d8c-869f-24f458306503
 29 32af05c0-6a07-6106-8802-51a2d8148cc4
 30 cde3e02f-1584-2745-8c6f-66d731716b6d
 31 49a0b9cb-0d22-4de1-bfd1-8b591f1d7249
 32 635473c0-74fb-72ed-ac28-446aba900f94
 33 59b39948-06f7-7205-bd7f-d5cfac4c900b
 34 7139eb53-3171-58aa-83aa-bb4a95538e1c
 35 187c9f81-778c-6c65-b086-d9d0513988f0
 36 2d9b1d86-5ee7-57ea-95de-7fec742bdb59
 37 88d43e91-af39-6334-8313-1de37a978204
 38 7cdb1d11-073d-3af0-aac9-93754515b2d1
 39 24eb45a1-9836-5c69-ad92-146d17bf5244
 40 09cf0e44-5f20-3a62-86bf-b366e16866ba

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1185024415880712584750101865624775656353. Exactly this sequence comes out of new Random(66).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 95 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs