A858DE45F56D9BC9 archive

201301071959 1656hd

explained decrypted filler

seed 471

Metadata

Post ID
1656hd
Title
201301071959 → 2013-01-07 19:59 on A858's clock
Posted (UTC)
2013-01-07 21:59:58
Timezone
UTC−2 · title 19:59 against posted 21:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201301071959) = 08d1dd6ef8648aa6a94e945242987f63 (name+title)
GUIDs
32
Filler GUID seed
new Random(471).Next(9) ✓ verified
Run
jan2013-A1 (short)
Draw
8 (assumed: numbered from the first post)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
15 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: short

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201301071959 (name+title). Key = MD5(password) = 08d1dd6ef8648aa6a94e945242987f63, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 7f9bffff-c1a3-75c6-ac84-da74b1624e7b
  2 c18ecca5-f1f9-06eb-b82d-c0c1fba9601a
  3 4930bca2-f905-8855-a6d1-c7221ff58e7c
  4 f9fcaf3b-0041-0fdd-9546-47967ab9b5d7
  5 617a56d9-8b78-7ebf-b109-f93510d2d3cc
  6 267e7dce-7be6-1f47-8c27-bba469d66756
  7 2fc0f84f-a1f1-8c05-9c70-18b009bc5dd4
  8 34afc720-eb09-6328-a722-54dd3eed33a0
  9 750f1eaf-2f21-27e3-99f3-ec6ab239a7ab
 10 1a01a893-c2cf-8b2f-ac01-e3a2650baed3
 11 53cc0ec2-1ee3-2979-8e75-1c06d7fb5851
 12 6acaf778-7aae-188f-8880-a0e20595ee07
 13 dc530457-9cd7-3a87-8849-ad1aa0da3e32
 14 295f9859-0cbe-44ff-be45-7e00dd68b14a
 15 fb24b4f5-5eff-6815-a92e-4606122b65c7
 16 fe235c76-ec23-144b-999e-a5ed8f746278
 17 687a91a7-e229-7c90-bafc-d5f5926d3b9c
 18 fffe35fa-4415-0858-a7e4-9ab96a55457f
 19 83d6797b-e115-388d-b5bd-167dc606458c
 20 e446ee63-c9d8-6ceb-961f-383ae57bfbd9
 21 d9b8e250-2da3-3a84-b543-dd29d07d0fc5
 22 53826177-1b72-3461-8b89-9b7353ba2d00
 23 dc8b7220-b312-54c2-b687-a58ac28ed7fa
 24 22908942-a557-533f-ab45-152f5185a351
 25 107087ce-f003-762a-a976-37907836c129
 26 7d38bcaf-fa39-4eca-aa58-984cc01c6077
 27 f23fbb7d-9e8a-72ec-8b8c-19edf33e878a
 28 c482e148-e841-4121-b241-b899b1a0a7bf
 29 ac64d606-c6c6-5bde-a0d9-f402ac12ebf4
 30 13b164da-59ef-3111-b1ec-edfd012f216e
 31 33dff321-4909-035e-bf1c-7f7053e2d95f
 32 8726f3fe-40e2-4461-8454-ebe8fc345e7d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 70807186282134617036335574745304. Exactly this sequence comes out of new Random(471).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. Grouped in jan2013-A1: piece A, 9 posts 16-hourly (zone -2); undecided: candidate seeds 162,853,390 / 1,000,996,750, 2 hits vs 0.91 expected; run 39 and Dec Patch-Tuesday boots excluded
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs