A858DE45F56D9BC9 archive

201309231832 1mzo8t

explained decrypted filler

seed 34

Metadata

Post ID
1mzo8t
Title
201309231832 → 2013-09-23 18:32 on A858's clock
Posted (UTC)
2013-09-23 22:32:51
Timezone
UTC−4 · title 18:32 against posted 22:32 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309231832) = 023f375135eaa59b332f4238e514ee0c (name+title)
GUIDs
40
Filler GUID seed
new Random(34).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
130 · predicted N = 40 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309231832 (name+title). Key = MD5(password) = 023f375135eaa59b332f4238e514ee0c, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 89cfefa4-c5e3-4459-bafa-6c94982efcbe
  2 26e2c37e-9620-724c-b5e2-51dddbf18044
  3 90dd1fa8-9198-4875-812c-6a3b0937f167
  4 84e32729-380e-764a-bb12-66856bfda1f7
  5 aaf4ab0a-1129-5e7c-a00b-26bb723c5dd2
  6 d5cc90da-6b61-2081-a976-8dcfb6ddab47
  7 95e55c20-5cad-1cef-8558-ad3e608e59fe
  8 ce466951-1817-4a3c-9f0a-fb8ac3ad7711
  9 8c1cace7-6520-1e9c-9ea7-8da5a9b26c13
 10 1f4e3271-9d2c-7fa5-a7f9-529f947242aa
 11 4ae2cd27-3bd6-3d28-93ef-ea5bed2e0c34
 12 835e4208-04ef-098c-8d23-36633bde8c58
 13 6779f7e2-16a7-0bab-a6eb-8fc936233188
 14 04f89313-36b7-123a-9c0d-b5742b74a413
 15 1fa2ffac-6b5b-7bae-9b54-52b4898bfa80
 16 eaa422df-04fc-2198-87af-4910f45782bb
 17 e7e6f88f-8a80-1a31-8045-0a91df1ed655
 18 82b51918-a796-05ec-8089-a58049dde052
 19 435dda33-ac2a-5c70-b213-298cdbd8d294
 20 e71462b5-20fa-4d42-8060-5cb06729eed4
 21 9614b004-35c8-3233-8b36-9b387c39c5f4
 22 3348e391-ac70-1b19-9687-cac718531923
 23 81e6dbd7-33e1-669c-90c4-a4a677314109
 24 d15ce71e-f20a-8c36-9f91-4c72c7f3c2b6
 25 37c18277-da02-0330-a025-897f8982abb9
 26 04687124-b708-3a67-a832-a8ade432f341
 27 9bcb314e-d0d6-110f-a277-b719c1c0bb4c
 28 385188a9-388f-6c18-be0f-8692e9675118
 29 a5bf107f-a661-86e4-96ab-7c6ea0bd11c1
 30 73894acd-2d4e-4681-89d8-165f8dfacb81
 31 e7043ae7-08d0-6fad-bcdd-4c35a11cd0e2
 32 a270cc68-2fd2-3fd5-b396-068a100714a2
 33 69e69054-5263-8949-8db3-0b5c73197cdf
 34 6e54ade5-c462-7a64-971d-e8e3d29d4fb9
 35 22f004f8-9f4a-415f-8100-4a111f839431
 36 8ddaed9c-8783-24eb-ad8f-344cd18ec589
 37 52205aee-5706-1d91-a6b7-b838350990d2
 38 63f121cd-b685-42d3-9835-55869751b312
 39 46b540a0-f6dd-146a-96e2-07407a3bae89
 40 67a59f1c-ff9c-2aea-934f-a6ea4156bfd2

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4747521417300172105431680316846387421412. Exactly this sequence comes out of new Random(34).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 130 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs