A858DE45F56D9BC9 archive

201309230632 1my9ee

explained decrypted filler

seed 746

Metadata

Post ID
1my9ee
Title
201309230632 → 2013-09-23 06:32 on A858's clock
Posted (UTC)
2013-09-23 10:32:52
Timezone
UTC−4 · title 06:32 against posted 10:32 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309230632) = 919a86a9328b190c8478825d91b68def (name+title)
GUIDs
32
Filler GUID seed
new Random(746).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
128 · predicted N = 32 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
11 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309230632 (name+title). Key = MD5(password) = 919a86a9328b190c8478825d91b68def, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0add1b58-ae27-4509-b2a5-983325af6456
  2 f02ca874-c0a9-6d85-94cb-45b0d1e4e06e
  3 fadf8d9f-ea57-162a-8014-aeacd2458cba
  4 2462d24d-3fdc-7ab5-ac53-62656d028397
  5 15e08005-1cc0-059c-8be8-01176e2563e7
  6 1891577b-8c5c-40a3-bf86-6c1aef6d6138
  7 5cfb85e2-1378-121a-84e4-4354c01990ca
  8 75523965-229a-68ec-ad9f-4c4aa2626313
  9 b392b6fa-e6ce-26bb-a7d7-6b3aeadbd5dc
 10 9e100a0d-9772-319b-9937-0e6727d16b4c
 11 418cb7da-2f36-8f06-862e-8283c917390d
 12 be836590-41df-79dd-b49f-7474ada450b6
 13 d6bb09e6-dd9e-4885-96f9-59a38d300ad0
 14 d7dfbf6b-87b5-541e-8ae2-f801f926088d
 15 ab20571a-66e3-1f25-989f-b5078d8f2448
 16 58926d6a-64a2-85c3-97c4-a521b83be6be
 17 0207baf6-1474-4956-9d86-f4b582470a60
 18 6c0009fa-69ed-4be0-8b39-a25b836b06f6
 19 8867d575-e881-7991-9177-7a990934ab1c
 20 4672afa7-5bf6-1f0b-a553-387d9dff3ee5
 21 7f1caa10-c65d-8d1c-9683-47b5d149f4bc
 22 be42d3ba-adb4-7334-8307-23d9627eb8b0
 23 eef3edbe-f0c5-05f5-b48e-368bd280a370
 24 9a9f808b-5bdb-5e2d-8501-0be34791688f
 25 ae1f9dd3-d92d-76eb-ba00-831cc9621ac0
 26 52c05e2b-3539-3292-b959-64cf202e6089
 27 1ec27992-6188-2cb5-976e-5bd02202469b
 28 afce8980-6316-89e1-8916-1ad42f1c0010
 29 2cb33f9d-f7e1-5fcf-89ff-c579e4620cef
 30 ea18d924-2929-702f-9390-5add782ddbe6
 31 247f7411-c653-51d2-878d-8fa3b66f56bf
 32 f6260110-69f2-839d-856d-36ca89efe4a0

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 46170416238745184471870573285758. Exactly this sequence comes out of new Random(746).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 128 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs