A858DE45F56D9BC9 archive

201302252026 1989t5

explained decrypted filler

seed 646

Metadata

Post ID
1989t5
Title
201302252026 → 2013-02-25 20:26 on A858's clock
Posted (UTC)
2013-02-26 01:26:59
Timezone
UTC−5 · title 20:26 against posted 01:26 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302252026) = 8e7c75dcb184b7670a02ea5d19798b78 (name+title)
GUIDs
36
Filler GUID seed
new Random(646).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
27 · predicted N = 36 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302252026 (name+title). Key = MD5(password) = 8e7c75dcb184b7670a02ea5d19798b78, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a5d02fcf-560c-122f-9a5d-61216dd8970f
  2 f8cb83f2-36bc-368c-a0d7-c6e14ac021e8
  3 bb953559-35ed-21df-8372-186722af4b4c
  4 97635342-7c12-3997-8b9b-98dd7a93f867
  5 78acbf5e-10cb-7c4a-9384-c09fa67ebfef
  6 e60e6554-d8de-0841-a04d-54864f43383d
  7 5bd601e2-2c60-3855-a3ff-e9ac22a19413
  8 42788aed-e1d2-408f-9e81-c7751a985ff6
  9 1548917d-8518-88b2-8547-d38e33ab47b3
 10 d948ddf2-7951-424b-b77a-0c4fa663a5a5
 11 20d010ad-6a44-1f3d-adb5-7fd4a9d86be7
 12 5d881bb0-7dac-7cc3-a738-1b57320f0550
 13 93866dd8-e394-61fa-b9a2-d1298b8b48e5
 14 2894f956-d048-4107-a79f-db594af828f7
 15 19c9cb62-ceed-12b8-a97b-ea5abf0bf562
 16 305ad2c6-c0fe-466a-8c83-afa24cb4e9b3
 17 6b9c0d43-70b5-3f7a-a296-bf7a01432e8e
 18 e3c03c77-b77e-4f49-888c-e4bdbff5961c
 19 6a567108-4078-17d8-9aab-976f6e7c0c5a
 20 45d9a2e3-e8a1-4a65-b144-81dc0a27222d
 21 624eae89-52d9-5246-9113-9cc386b6a375
 22 19de9ea8-6a74-36ca-9941-161224365ead
 23 26d85866-badf-1a1e-8eda-6ad5d3de6121
 24 a68b9e03-2f36-6357-8eb3-78ebd46450ef
 25 87447ee4-5b0c-0f2f-8b33-bdbc1c240f23
 26 e849b125-feb2-0883-8a06-863eda91d5dd
 27 5d231199-e683-3585-8d37-e75cb23dce37
 28 861ce9cc-4475-8d74-82f4-b96cb1fc5e94
 29 378eb5a4-761f-8079-b3c8-893423a40506
 30 dd4c9505-4e99-3a60-b3ce-b16029853a0d
 31 3e1fb56f-c5bf-6222-85e2-faa16c526ba4
 32 5501b17e-5b4d-5b24-82ea-d6d1228bc30a
 33 d4308c46-0ca8-040b-b02f-0165fb45eb72
 34 d5cfa61a-3eb9-10e2-8ce0-66d856181a8c
 35 ddf86f78-5250-1a4d-bf49-187f2a3370b0
 36 b9eaa077-a094-60b7-a140-c7f4c5b26d47

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 132370348417641434145316003883650116. Exactly this sequence comes out of new Random(646).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 27 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs