A858DE45F56D9BC9 archive

201301061159 1626ov

explained decrypted filler

seed 116

Metadata

Post ID
1626ov
Title
201301061159 → 2013-01-06 11:59 on A858's clock
Posted (UTC)
2013-01-06 13:59:59
Timezone
UTC−2 · title 11:59 against posted 13:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201301061159) = e466cf7943dd7f9745b8cd0d6e1939b2 (name+title)
GUIDs
32
Filler GUID seed
new Random(116).Next(9) ✓ verified
Run
jan2013-A1 (short)
Draw
6 (assumed: numbered from the first post)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
12 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: short

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201301061159 (name+title). Key = MD5(password) = e466cf7943dd7f9745b8cd0d6e1939b2, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 8f227c52-ce2f-2a04-8d82-d1bcb3a8822c
  2 d04cc9ef-47bd-7622-820b-a7131037451f
  3 c7729ee2-f735-7923-a81d-c1da15172c23
  4 c9c83b2e-2d54-25d5-b194-3931a6e6cd23
  5 0a6034f8-07b4-532d-9709-76b1ed54818d
  6 4e3b8f83-d516-85ca-80f3-46d0a892c0eb
  7 b620b2e8-7c1e-7cd2-a3d3-cd3d84692ec6
  8 3d7d411a-5849-5789-b37c-ea469db1f4ae
  9 92dcf43d-86e2-2e2e-8e1d-b9e9b4252cf1
 10 98062d9a-4b0f-0d17-8f88-262edb860109
 11 cbaeec53-e5d8-69e5-a138-a7c33c897390
 12 f1590b6a-81f7-0ed2-8331-2029db310ffe
 13 9b2544a4-5839-31f6-a2a9-410efeaef303
 14 66dc4367-5b93-7aeb-8f44-9a5c51b130e4
 15 83c03077-48e5-16da-b26c-db87d21d426a
 16 b58601bf-d3ca-44e5-a390-1b453ebaf156
 17 c09d31a6-364c-56b6-b08f-068fcd379b0e
 18 864a7f23-a02b-8f13-8fdd-f74efbbc6082
 19 2526b2d9-86ad-7cf5-b3c8-482a30167697
 20 ecbc3e48-0e3c-26e7-ac79-fbfd30589916
 21 2f9fd0df-e27d-2d10-8f34-99dd288b35a2
 22 be74f9b6-89c2-2114-9fa6-41bfaa1c3ab7
 23 4eca139c-bed3-5799-97c9-7377861c0bc9
 24 35ccd27d-00fc-50e9-bc83-71abe433ef14
 25 3662df3e-337b-0802-b6df-1bc2a14b30a2
 26 115cc047-bec1-10b8-8434-ecfd1ffe18d7
 27 99d0b2e5-a748-6c7a-8938-a5ed6559e5b1
 28 2b4eb607-5f0b-5d9b-ae0a-5745bf352dc2
 29 08ed7b5f-2ece-5250-ad5b-6dc3ce0c62ba
 30 c057b1cc-4465-4afa-a2c2-5fb850789d14
 31 48fd80b9-8743-0f74-8ade-4867a826f8a1
 32 075fa9c0-667a-09b9-ac99-98e164b95506

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 27725875206037145872225501655400. Exactly this sequence comes out of new Random(116).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. Grouped in jan2013-A1: piece A, 9 posts 16-hourly (zone -2); undecided: candidate seeds 162,853,390 / 1,000,996,750, 2 hits vs 0.91 expected; run 39 and Dec Patch-Tuesday boots excluded
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs