A858DE45F56D9BC9 archive

201309300714 1nfld6

explained decrypted filler

seed 61

Metadata

Post ID
1nfld6
Title
201309300714 → 2013-09-30 07:14 on A858's clock
Posted (UTC)
2013-09-30 11:14:54
Timezone
UTC−4 · title 07:14 against posted 11:14 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309300714) = 3968496ee6a84a31ff2e4b01a77ec036 (name+title)
GUIDs
36
Filler GUID seed
new Random(61).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
145 · predicted N = 36 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309300714 (name+title). Key = MD5(password) = 3968496ee6a84a31ff2e4b01a77ec036, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 931d1543-f897-5f2d-8acb-3e1593e4f3e4
  2 e8a19b17-508a-6342-b84f-6bc26c708296
  3 3140652f-5099-38a0-bc27-9522b530ca23
  4 be8ec040-9663-5d2e-8e39-247d4bf81c69
  5 7dd27b48-5d0a-6e66-acc7-e3eea847ad91
  6 e2b9c8de-a41e-773a-9451-d32358d3bf9b
  7 ea9f604d-36da-2409-8f88-5ac7cd86e0eb
  8 19ee6a1d-bb4e-06cd-9bee-46fec682ec37
  9 f7e50262-3631-4596-bd49-dc66afa61be9
 10 f6cb7a0d-d6a6-6851-a390-0314d7191a3d
 11 ed7245b8-0960-2e06-a9ac-251b46a17967
 12 4dd09afc-5ffb-01d7-9c69-0082b7d0da24
 13 4a753664-2ad9-5727-8cd1-cacb194ae07a
 14 eedd40e0-a705-1920-91ea-8fe9e41fa8c5
 15 3491ae76-b86f-6a55-beeb-005a1fc7e393
 16 826a5b61-d9c5-1ae3-9a6a-70ccf84de080
 17 e727841d-8e3d-4e89-9ad0-3e92a2bdb3e9
 18 64d40a0c-3f34-740a-ba28-1937800d5a8e
 19 4a5ee9a2-5bd9-201d-af4f-b99d05703012
 20 5e37074f-51fa-8f77-bfff-b752df27f9b3
 21 787655fe-f37d-8e96-a8d8-13d1888ed1c7
 22 4f7eca94-a39f-7c62-8c51-70b9edfb2ebe
 23 d7f5f7c3-9e22-2173-8a84-1a415e76ae5c
 24 c7eb6d29-b074-37ac-aa1d-21f70af2d055
 25 400f92f2-ed0d-6125-9d9b-50dbd9c6011e
 26 d236db51-6fee-6b25-a33f-24836df04bcc
 27 5b7423ae-ad9b-3a08-b73e-db882b0f917c
 28 53cc0e57-235a-484f-863b-33cce3299e7e
 29 552b5ba0-858c-3822-b102-165f43278799
 30 e8116f2c-fd12-17cf-b952-bba7f24e6e4c
 31 abab200e-aba2-663f-899a-9e7b3356ff81
 32 07cc390b-7863-482d-bd95-df1b768f6257
 33 6c8e06da-7893-75f1-8595-d8138a5022ca
 34 147a9a79-8ea8-4983-9d25-04833cd36da9
 35 3a8d2769-7bb5-8745-a49a-a4f6ab6a4726
 36 f0e6493a-92a7-319e-9279-69da13eca5cd

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 563567204620516147288723663431647483. Exactly this sequence comes out of new Random(61).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 145 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs