A858DE45F56D9BC9 archive

201309161559 1mits7

explained decrypted filler

seed 871

Metadata

Post ID
1mits7
Title
201309161559 → 2013-09-16 15:59 on A858's clock
Posted (UTC)
2013-09-16 19:59:55
Timezone
UTC−4 · title 15:59 against posted 19:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309161559) = 60f6e37cac3f26e929318f7c934e87a2 (name+title)
GUIDs
40
Filler GUID seed
new Random(871).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
99 · predicted N = 40 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309161559 (name+title). Key = MD5(password) = 60f6e37cac3f26e929318f7c934e87a2, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e3f3ea4b-82d6-619f-a37b-109423fdb524
  2 304a544b-c13d-3c2a-a99a-0e32c51db140
  3 6cea1411-d98a-5cb2-a7eb-8c2da35bce78
  4 7d0ec724-f736-4475-9296-8f51ece177f7
  5 513e4c6a-0ff1-457a-9f34-3e62b34a4807
  6 02b795d3-653f-614d-af08-93db14ab70b4
  7 169de380-3afa-1704-a90e-7fad324f70c9
  8 6ae68390-1878-3276-ac0b-dec6e55543fe
  9 d353df42-5228-698d-9334-704060900035
 10 6c8e3919-1bf7-4440-b876-6930b36ba698
 11 5d8f75f7-4296-84c9-9f62-ef9631596de0
 12 d01aa761-1c5c-4e0f-98dc-cfc84e855b44
 13 de8cf3a4-fff5-3e01-8847-ca37b7357814
 14 4330177d-f1ae-50ff-91b9-0171b088e383
 15 b745aa0d-f252-58a6-9a8a-fa4000e55386
 16 673d23e9-e04f-829e-8907-c813f5a71a00
 17 8218cb39-fced-8fb3-bb43-f11ff8f89ae7
 18 f913dad3-6f4b-0cda-b4e7-082a218f1539
 19 ff029acd-ece0-2eab-927d-37aae6002603
 20 9e6e372f-8077-571b-b272-038560771376
 21 a5e9f556-dbaf-4635-9967-fa748531757c
 22 2ad64428-77bb-4f3b-8781-0fa4a5f1c0c6
 23 40c2706c-cec6-1e4c-a6d0-0409de9ad045
 24 e1eeee48-f0aa-20ab-8b03-16e3bc710619
 25 e82c4ff9-6248-04db-8b69-8185016069f8
 26 6e7fde18-98dd-6441-a876-626a0311bf3d
 27 176c83ea-9119-7e46-b227-ae271de492cd
 28 830260e0-9513-3d87-bfd9-03a3d5550ef7
 29 f640d516-7b06-1a3b-a64f-6f22dabb2f75
 30 1e23e82d-188f-4ae3-a717-166ccfb1aa59
 31 3c1caff9-40a3-660a-9851-70e1afa19119
 32 a602ddb6-35b7-7c3d-82d8-00c750196f0c
 33 2218eba4-ba8d-4023-a415-caa73bb1cf07
 34 c6f0f24b-6a9c-72f3-be22-49b063f5cb15
 35 86078cc8-132d-6504-8174-96f1896ba5e8
 36 fd2d4928-0ff7-4718-bc20-6421e5944b4e
 37 16b64d43-0721-4403-a0d3-585ea5f148ca
 38 98a28013-273a-8c91-99c4-c791c79d08c0
 39 349aed37-e64f-41f1-8f91-51cb15e84005
 40 d5bfc424-5d59-428c-a2fe-5f2cc983fc3c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6354461364843558802544120673146747644844. Exactly this sequence comes out of new Random(871).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 99 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs