A858DE45F56D9BC9 archive

201301070359 163u1f

explained decrypted filler

seed 666

Metadata

Post ID
163u1f
Title
201301070359 → 2013-01-07 03:59 on A858's clock
Posted (UTC)
2013-01-07 05:59:59
Timezone
UTC−2 · title 03:59 against posted 05:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201301070359) = 6d3a8e7472b52a10c8fef0e2a40f806e (name+title)
GUIDs
36
Filler GUID seed
new Random(666).Next(9) ✓ verified
Run
jan2013-A1 (short)
Draw
7 (assumed: numbered from the first post)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
16 · 2
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: short

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201301070359 (name+title). Key = MD5(password) = 6d3a8e7472b52a10c8fef0e2a40f806e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5e63526b-8234-5d45-b976-4fc8276a6c4e
  2 faa31305-d45f-240f-9306-ec024cade9d8
  3 4885f53e-9cb7-2cf7-aaee-31e6ad4881ba
  4 0ba452f9-7d81-6747-b5ae-0bef2765825d
  5 2faa98ef-eaf1-8a39-8a44-e70085ce6408
  6 fa470134-4506-5794-9684-e356664e6c66
  7 073afbe5-1e5b-2b8b-873c-38acbc1c8ce9
  8 70a9b2d1-1b13-5ec8-94d5-d120c9e54513
  9 44c776dc-00dd-3189-b0da-3820fc201929
 10 2722f22d-67b7-7873-8d23-a5b0d39716b1
 11 db7879bd-a280-8438-8221-3374faec7a8e
 12 4b0d3d3e-6b06-317d-9b90-f40b133258d6
 13 2c663541-8fa8-466a-9711-5343c9130738
 14 5d48cfe0-f553-82e1-ba4b-0f4f7dcaad3a
 15 2ad438c5-2b80-10f9-907e-5aae39115ea5
 16 61dfa2c4-a5bd-8d2a-ae25-7ad317308f8e
 17 1c8f44f4-0469-74e8-a58f-b01ed2c13f8c
 18 92a297b2-52ba-83a2-a0ae-0be0a5a7d07f
 19 280b94b2-91d2-64a6-adef-a74f7fdd16a2
 20 05dd1300-231f-1974-9a44-c348f2a540da
 21 db735c4f-b177-2b9d-bf37-2528b486ddef
 22 8801769f-be96-26aa-ac93-0ff4b8bf5d0b
 23 5f7b0770-0d3c-4fa2-9487-b457f4d6e38e
 24 41161096-d36b-69ad-9234-77dbd7cdc264
 25 2b11507a-e4d2-8188-93f6-09f74239139d
 26 dab6caf5-99f7-71b3-98fe-67d423a47e3b
 27 a6010c08-f00e-4e37-be14-3e05b551a03a
 28 d6dc08aa-3236-377e-89f7-90b7d7ae007b
 29 3fc1978a-e1ae-4a07-94e0-64814087a065
 30 afc5c273-8c19-4bf5-98f5-2822b4fdd395
 31 0502de68-6054-045c-875e-044d488badf5
 32 a10d8e63-c65c-7820-920e-3a2c4d80bc2d
 33 29d7b22c-8302-1c37-95ed-4cb1c207b5d2
 34 4cb1fe4a-82c5-69a6-93f2-07893ceaf3e6
 35 c7867237-fb50-18bb-84e7-5bfd25284cb7
 36 be0b7900-b923-5431-b237-9bcebc5b22cb

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 522685253783481878612246874344071615. Exactly this sequence comes out of new Random(666).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. Grouped in jan2013-A1: piece A, 9 posts 16-hourly (zone -2); undecided: candidate seeds 162,853,390 / 1,000,996,750, 2 hits vs 0.91 expected; run 39 and Dec Patch-Tuesday boots excluded
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs