A858DE45F56D9BC9 archive

201309201832 1mt0ta

explained decrypted filler

seed 956

Metadata

Post ID
1mt0ta
Title
201309201832 → 2013-09-20 18:32 on A858's clock
Posted (UTC)
2013-09-20 22:32:56
Timezone
UTC−4 · title 18:32 against posted 22:32 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309201832) = 273839bdba12af1c4359d5b12e5e0ecf (name+title)
GUIDs
32
Filler GUID seed
new Random(956).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
118 · predicted N = 32 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309201832 (name+title). Key = MD5(password) = 273839bdba12af1c4359d5b12e5e0ecf, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 871e9289-5985-122d-8ca9-940722be8596
  2 24c4ec2a-cf45-2706-ba4e-b3e588f01aa7
  3 ff77000e-81b3-0d30-80b0-59c114fbd78a
  4 9e0f0ff3-b6ab-5358-aed7-1ed42809b3bb
  5 ac0bcfaf-e761-7eb7-ad75-544e9dea7e73
  6 5400cac3-eb30-0ad6-95ef-b4a9b1bcec2e
  7 053ea064-33cb-2dba-8ce4-c15eab8077f4
  8 a28e8560-324e-047d-a9ae-283066702a82
  9 2bddaf93-1f42-2b62-a159-1e9aa8bc1fce
 10 c90353b6-4f3e-7d44-b390-02ffa2aa0bdb
 11 1326840b-7ea6-5b08-a76a-70ffc85c6237
 12 704a3e9b-2bd0-7f3d-8638-1df82ab81273
 13 44eea172-2837-7a82-acb8-c8ae3b818e1e
 14 ce191117-c341-70cb-a41e-177fb5f5c33b
 15 22339fb4-4d42-1ef6-ac96-eb15ecbad683
 16 48702c0c-44ec-03c4-affe-c0de81decf94
 17 a44ecdf1-2a04-6425-bf14-62357d90eb95
 18 8bb64313-fce2-666e-baef-9fb94bfb82f0
 19 cc98dc85-63b8-5a5d-ae82-f698e9689d9d
 20 c75899d4-9bcf-4ee8-9a61-43cbe0adbdee
 21 8882e89d-cbb3-7095-8153-23dadaa42ca6
 22 6736ab9f-6695-3e93-bc0d-0a7ff543948d
 23 00b7e269-b20f-53f5-994f-c12fbac9b682
 24 b22c4458-fcc7-0517-8931-371b9e078724
 25 8425aaea-2950-3f48-9dc5-1bdf38d62c75
 26 6eea3e18-4295-3263-b45e-fd8719051d08
 27 f6f6dd6d-516a-794f-9195-577691819e24
 28 4f4eded1-6598-04a4-90dd-830d7fd29ed5
 29 d9d2c013-f125-56b7-9f0c-76c4edddd81d
 30 09f8a977-00c6-09a9-b2bb-a175c594b06f
 31 fe4079ed-e1bf-1d3f-bf5c-d49951fd46b0
 32 d363f00a-f8c4-2d12-894e-d59895ac7cbc

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 12057020275777106654735033705012. Exactly this sequence comes out of new Random(956).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 118 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs