A858DE45F56D9BC9 archive

201310060715 1nu513

explained decrypted filler

seed 90

Metadata

Post ID
1nu513
Title
201310060715 → 2013-10-06 07:15 on A858's clock
Posted (UTC)
2013-10-06 11:15:14
Timezone
UTC−4 · title 07:15 against posted 11:15 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201310060715) = 8e959319cb4597a5ab607f52fc9fdc5a (name+title)
GUIDs
32
Filler GUID seed
new Random(90).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
157 · predicted N = 32 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
7 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201310060715 (name+title). Key = MD5(password) = 8e959319cb4597a5ab607f52fc9fdc5a, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d1dea3a8-d2c6-6fa8-a2c1-ffaf3acc4087
  2 378dd56a-e1b9-2ba4-8e76-96a628a00ddb
  3 c30d9446-1516-6644-82f0-229dbefdd90e
  4 6adcc6ae-b717-6686-ba89-08fc9e680764
  5 7dcc8f3d-b30c-765a-ba30-5ec209bc346f
  6 8a8c37c3-a519-1efc-8481-fb056ad93b40
  7 b7bddb04-756e-2b5f-bef9-40ab7dcc9af9
  8 b977d924-eccf-552a-ae0d-c22e2d3a95cb
  9 a5af87a1-e239-1182-b71a-612ba84f1c14
 10 6b4d8872-92ab-4909-8d77-f6444d06e2a5
 11 15a34044-9a88-52fc-9a1b-23f72284ccff
 12 bba68dc6-0338-61b2-b66b-8d5bca470604
 13 88581e1a-0317-44c9-bdca-494c3c73e74f
 14 78780221-f06f-292a-809f-15a37edf4b5b
 15 f80b3dfd-8787-8872-888e-70c2656b5633
 16 dd4b6632-f073-239b-a80c-f32701b46413
 17 6d89d61e-6e62-63c0-b018-1f220884ebd2
 18 eaa610a2-a39b-7ce1-a391-869b4963b62e
 19 2fe96847-11c7-144a-a2f9-091002554afa
 20 8e875347-a246-1604-a153-13c6fc7fdc0b
 21 f890d401-868d-6634-ba68-ae8ddb894d8c
 22 4484d9ba-f518-835f-a667-00f908e982f2
 23 7791d1d5-0778-1ec5-87ac-d48b8fa92143
 24 2f529935-d21b-4a07-8cb0-0316f82676d3
 25 bb63ac83-d4e5-46be-8c38-6fab5a3c6e90
 26 e598f0b5-3a52-3a35-93fb-7f6ceab81b55
 27 8ef30773-4c95-274e-9afe-acc78251260c
 28 896c09db-b259-4874-816e-e59b24f60b65
 29 8b6a89cb-4072-36de-976b-852fa1033828
 30 2472dee9-d761-5184-aecd-c8864de02709
 31 ddd1bdfb-0fc3-3723-b026-882b27982deb
 32 5b9db7b2-9bc0-11e0-bd4f-0a659ccf5d3a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 62667125145642826711681443243531. Exactly this sequence comes out of new Random(90).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 157 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs