A858DE45F56D9BC9 archive

201309220032 1mvnjs

explained decrypted filler

seed 219

Metadata

Post ID
1mvnjs
Title
201309220032 → 2013-09-22 00:32 on A858's clock
Posted (UTC)
2013-09-22 04:32:53
Timezone
UTC−4 · title 00:32 against posted 04:32 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309220032) = f3799fda691e55d30f3efe12d251ede9 (name+title)
GUIDs
28
Filler GUID seed
new Random(219).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
123 · predicted N = 28 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 2
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309220032 (name+title). Key = MD5(password) = f3799fda691e55d30f3efe12d251ede9, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 266d3b95-9e9c-138a-b2db-2645a041106c
  2 c5ae6961-39c0-0b88-b32a-a498362a3cfb
  3 a100b50c-dc70-76cb-9e31-5955e76933b3
  4 a5794772-f1d4-2b99-bc52-f1b4d6338f07
  5 e3374526-5121-0853-b637-ca6d42297e5e
  6 691ac94b-6ebd-8e51-ad29-bfd6b7d325ac
  7 e8bc3e8f-7e31-0770-8ca1-6826632f5c92
  8 9c3be75e-9cda-28d0-acca-8271959c8714
  9 b915cab9-c315-0896-9f59-d176ac4533da
 10 c384389e-0f26-0ba6-81cf-49c038fe8998
 11 de81c6b2-eb41-5e98-b0b7-8afb4db2ea39
 12 0d331c2d-6a72-385e-8b9b-30786a677de5
 13 e9d7b53d-a2b6-1213-9f4c-404a91187baa
 14 f0ba9cfa-e11b-3001-9272-68190344bbaf
 15 17b2107f-12af-240c-8a62-7c334bc136e7
 16 f301bfcb-595d-7822-bf0b-dfe15be32c82
 17 ca871bf9-ff72-80c5-b8ae-5cd2e0c6f7ee
 18 f15d9b7e-662e-6dcd-bc4f-286ba7dfbdfb
 19 a081bdbe-3dc1-5719-a5d4-e4b4f8915d96
 20 700adb53-b131-14d4-b667-df58e89ff694
 21 759b02ab-d6bb-8520-87a4-b88fe7339218
 22 83734445-8b21-55f8-a5ed-66da354f0817
 23 8713c0bb-b49b-0672-a326-2d0a7f6479ab
 24 bc5ce42c-e242-45c1-a09a-8e3ee7ef1865
 25 d819d090-b1d5-12e8-8ec1-c95c0b1435fd
 26 6d2e598a-2cc5-3f71-98c8-b21c4fc7cb36
 27 f66a3614-4129-22ac-aa81-44591cb656d9
 28 c8522a7f-9b49-3790-abfd-26eb1942d625

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1072080200531327865185041323. Exactly this sequence comes out of new Random(219).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 123 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs