A858DE45F56D9BC9 archive

201309200632 1mrqdl

explained decrypted filler

seed 635

Metadata

Post ID
1mrqdl
Title
201309200632 → 2013-09-20 06:32 on A858's clock
Posted (UTC)
2013-09-20 10:32:56
Timezone
UTC−4 · title 06:32 against posted 10:32 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309200632) = 2a8028abc07abf43fe446cbbe6491294 (name+title)
GUIDs
32
Filler GUID seed
new Random(635).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
116 · predicted N = 32 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
8 · 2
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309200632 (name+title). Key = MD5(password) = 2a8028abc07abf43fe446cbbe6491294, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 409675e2-53ed-4152-ae9d-77d3f3b17404
  2 7cccc923-0af1-1685-a919-53f09a3ea80b
  3 250ac826-d970-588a-b83b-7a998803e756
  4 2d697c3d-68e6-0b9a-88c7-1364cf02153c
  5 289bb13a-abb6-81f2-be9f-c020ffc11407
  6 a89cb008-6126-4856-ab0c-54d137d71c87
  7 ff727e88-9700-3b4a-8e7b-38b21bc09d3e
  8 835ef0b8-23e6-0a1f-b82c-21978452c486
  9 8f78076a-186a-4e11-a26a-046456e669b1
 10 16ee8eb5-cd18-3e32-bbab-31b9623d5367
 11 1b39f46b-ff9c-1429-8d33-878c8765f3b6
 12 0ef902b1-c1a4-1fa7-8adf-00b3b4f14e3a
 13 ef2a63c7-a62a-16a8-8af6-88f4b257904c
 14 23604877-15a6-72fd-a6aa-f1d296b6b956
 15 21809ba7-0d9d-470a-95a3-2f633e2c21eb
 16 8d55280c-e27c-5482-ba97-5cccd51da770
 17 9b635faf-0302-7603-b61b-397253be4fdf
 18 9350ec28-d300-62bd-b9e9-e738cc2c797f
 19 60786861-e011-7770-ad13-20bcbab3238d
 20 dfcd2704-00ca-1b98-9484-81ef3b7c9a9b
 21 6360aaf3-9b89-1a98-acd7-b44c09502841
 22 0e6916ef-2d1e-5432-8b42-c179192bd7bd
 23 38a2c45d-072f-2a1c-a517-f1a39972266c
 24 9fe8c34b-21f9-7b27-9573-f9d6c19ea934
 25 e0d99421-8a94-8d60-bb45-aa330145a753
 26 c505419d-a846-8721-84d1-93a5cc671657
 27 919636fb-c66b-713f-af37-bd603866382b
 28 3abe8559-5e3a-12fa-bb8a-bb18752f7e73
 29 9e5f8fbf-8027-8f37-bb06-c585a1b0c611
 30 91ea18ed-ca57-402b-bc57-75cb6f0075bd
 31 f9f5b6cd-939a-5af2-a43b-639eb4ed8ea2
 32 783da232-2339-6666-88f1-d8212805eae7

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 41508430431117457671152788718456. Exactly this sequence comes out of new Random(635).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 116 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs