A858DE45F56D9BC9 archive

201309261914 1n7llp

explained decrypted filler

seed 236

Metadata

Post ID
1n7llp
Title
201309261914 → 2013-09-26 19:14 on A858's clock
Posted (UTC)
2013-09-26 23:14:58
Timezone
UTC−4 · title 19:14 against posted 23:14 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309261914) = 683485ce47cc0138a45164feeb8c1e9b (name+title)
GUIDs
36
Filler GUID seed
new Random(236).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
138 · predicted N = 36 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
11 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309261914 (name+title). Key = MD5(password) = 683485ce47cc0138a45164feeb8c1e9b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e1b0780b-4987-09e1-876f-6899c8e32127
  2 3b90abbd-e697-038e-b3dc-413bf9e4e6a1
  3 fb3db403-da03-6b7c-a670-6271e3b979a5
  4 38ea0b31-1ac8-847f-90cb-6594cd21d09a
  5 b708cc17-8aca-667d-8c59-45e851321cd2
  6 8ac621dd-79a7-7968-999d-41f7a136d236
  7 fee8be9e-6197-5e8c-a34a-093f1c9c7384
  8 7ef990b9-daee-775f-9ffd-57afd2266189
  9 5c01d756-b881-19b6-bb99-9bd866581a43
 10 fcb04d63-3dc8-207c-8b40-61cd6c0080d7
 11 3b1bdfd6-de18-12e0-aced-f25d5c9ba1e8
 12 51536333-96b6-6860-9baf-865874d0bb48
 13 7b42bf4c-50d7-70f1-8f4b-df10414943af
 14 db51dce9-5019-22a7-b56f-b12e6be6cb8a
 15 02a73633-0434-19ac-b663-e85a98839e5a
 16 26e8e513-2771-3671-a3a4-7469f2af2456
 17 d50f5bf6-123d-0f39-ba52-3332db56e52a
 18 1eee3ca4-50ab-2b1f-b15e-f73fe47a5946
 19 b3a99440-ea0f-0edf-9947-45043c5540cf
 20 70ac91b5-53dc-6dfd-b01f-060a1f7dda2c
 21 64e703f4-8c32-17eb-b87d-d109e8784443
 22 1069feee-cbb6-63e1-9011-4fb5aa0e75d8
 23 ad0e7634-889c-743b-9ef3-47da23231f5c
 24 661d99f2-7ed9-487e-a7ae-4bb23a9bb73d
 25 c45c382f-b55f-77e8-b8dd-598b294f9103
 26 392e4940-e7bf-2d25-beb2-3fecb8806eb3
 27 89d55e28-6674-755f-9d40-939da205b703
 28 9fd84f3c-f111-86a0-890d-e37709539161
 29 0d6e907f-85e4-6398-8b39-4bdf25643225
 30 f229b950-a2ba-1bd4-8f3a-794d78953ec7
 31 8ce7949c-2185-2b2e-aba8-ab8b4a0742a8
 32 bfeafcba-2c0f-535b-9b94-300974bf0f46
 33 5f1bf9b0-43f6-1cdc-b649-072822e3bc6b
 34 30213961-6848-89d1-8e87-94705eef4073
 35 e17d1c81-1f23-0e21-861e-db74e9387a8f
 36 85e9e5e0-3bf6-8c3d-bb68-a12135abfa66

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 006867571216721302061674727861251808. Exactly this sequence comes out of new Random(236).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 138 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs