A858DE45F56D9BC9 archive

201301142359 16lnal

explained decrypted filler

seed 42

Metadata

Post ID
16lnal
Title
201301142359 → 2013-01-14 23:59 on A858's clock
Posted (UTC)
2013-01-15 04:59:53
Timezone
UTC−5 · title 23:59 against posted 04:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
32
Filler GUID seed
new Random(42).Next(9) ✓ verified
Run
jan2013-A2 (short)
Draw
7 (assumed: numbered from the first post)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
13 · 5
Tags
automated (decryptable)2013Encrypted masked GUID listkey: namerun: short

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 10780157-1cd8-69ee-a773-0513098d2e45
  2 b746a0af-1f3b-144a-b010-bf021612aefc
  3 524bc1ca-f901-1b6e-98a9-83a4ef638fad
  4 987fbec1-d85f-474f-8b35-1fcf6bf3d955
  5 1f0421f7-dfcd-1307-91ba-795d808c14c1
  6 0c4b44d7-dc1d-2a4e-ab5c-115dee7a0037
  7 cb0f9320-9dca-66e4-af2e-d0aaba33280d
  8 f42f4bef-1f82-41e1-af36-5a6123edf050
  9 1af46eda-750b-1d91-982e-536cf3a39551
 10 82bd142d-4bf4-624f-bb43-1044ac05508d
 11 feda1332-b574-2da8-931f-a41e302616bc
 12 49518cd5-68f3-2e74-8bc2-86ce5cd9df65
 13 95f88507-02af-48bb-9727-18957698fae5
 14 e717346c-0ac9-25e7-812e-416373e3fe9a
 15 ce723718-97c9-3fe1-b340-75c692a42c10
 16 cf1ba61f-97a4-2c54-af3f-25b224c8e4d1
 17 8a1cef94-fade-44d2-b6b0-f0a817ec4686
 18 84247551-25ab-01d2-ba58-8c7e74457174
 19 97b87b0e-95a6-7b4d-8bf0-85b52b453ebb
 20 46aa50f7-28c0-548b-bf8e-03cad0a5d2c8
 21 8f34a9cc-7560-38ff-90e2-6cc3a993213d
 22 18cbb5c9-bb65-1e79-9995-5e4b6fb45704
 23 b3ea0092-0517-0e52-82d1-ba627c3aeea4
 24 406cd665-e517-6d00-ab2a-87ba408bdd8c
 25 5ad8c47c-be8e-7789-8ab1-c7c6cb47738d
 26 c00acdb9-a854-4758-8c54-4f937c49a745
 27 1a9bb6f6-4edf-0625-a80f-aea2732f398e
 28 c3685960-a257-664b-8afb-56f861c27a33
 29 b0c4ddda-3e33-12d8-a6b0-eb95615f4f24
 30 d5704a3c-8426-8160-b4c9-d0fdbcb028ea
 31 8ddfc87f-bdcf-6a67-8b00-f232ccbbee56
 32 adf77d0f-cff0-4606-b290-49024f845b2c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 61141264162242324075310674061864. Exactly this sequence comes out of new Random(42).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. Grouped in jan2013-A2: piece A (second instance from Jan 9, daily, zone -5), 7 posts at range 8: undecidable, all boot hypotheses chance-level
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs