A858DE45F56D9BC9 archive

201309181232 1mng2o

explained decrypted filler

seed 768

Metadata

Post ID
1mng2o
Title
201309181232 → 2013-09-18 12:32 on A858's clock
Posted (UTC)
2013-09-18 16:32:58
Timezone
UTC−4 · title 12:32 against posted 16:32 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309181232) = 6b5a33335612450383517aacce1994ca (name+title)
GUIDs
28
Filler GUID seed
new Random(768).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
109 · predicted N = 28 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
9 · 4
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309181232 (name+title). Key = MD5(password) = 6b5a33335612450383517aacce1994ca, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 34255fb6-0e39-8712-9031-d6d43f67692c
  2 1f6ba38a-663e-1433-b1ea-d9ad4cff56f5
  3 aaf27e3f-f82c-531a-a95d-ed34ee93abb2
  4 3bd2c333-7755-4661-b942-057dace3269e
  5 780ef4bd-1c18-8b19-a389-a0b6c2ba6cd6
  6 f81d67fa-312d-6c0f-b0a0-7e7c4ff0c0bc
  7 102000f2-40d4-0b8e-bf03-265ec9fab718
  8 8db7131e-bc38-6133-acfc-3b010972529f
  9 0e3a2c0f-fc0c-8993-ab72-feffd0f9c557
 10 9fbd3163-3727-487c-ab81-7e330174eb23
 11 c981ca99-826e-008a-b03e-58a08b618fc2
 12 83a54615-6ece-0505-89b0-4d9eb9b338ff
 13 7365b1d7-8ff8-5f44-8543-5c3ce2e7b17c
 14 908f8513-d37b-0006-8fef-6d6f508f384a
 15 8ea45970-de41-55e3-b774-3d2deb94b9a4
 16 cb5df0e5-a29a-55db-83a7-381ecaadcda8
 17 a3ebc487-0bb0-6493-bb5e-78c50e2bc247
 18 279ac734-2ab6-1738-9da7-3d414e10696f
 19 c5ce1edd-8fc8-4288-96af-48c8f3a78212
 20 4f61df44-d436-6807-99f1-889a52a65654
 21 85d177e5-c0f9-7110-aa7b-11c974bd2766
 22 a9cd8655-df94-2450-8903-182d067cb407
 23 c166ed81-b2f0-7b14-b3bd-b553a7c144e8
 24 50a9cbf4-80e3-206c-aa79-8e1e95ba5b03
 25 91fe7237-ac06-8a9f-a511-1c0a053d024e
 26 caf0fd93-1873-4d88-80b5-247a515971c7
 27 2de58982-b251-26de-b542-dafdf2e08b12
 28 036a0779-e223-4f5a-ae94-f29d52eddf20

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8154860684005055614672728424. Exactly this sequence comes out of new Random(768).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 109 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs