A858DE45F56D9BC9 archive

201302252344 198p46

explained decrypted filler

seed 513

Metadata

Post ID
198p46
Title
201302252344 → 2013-02-25 23:44 on A858's clock
Posted (UTC)
2013-02-26 04:44:58
Timezone
UTC−5 · title 23:44 against posted 04:44 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302252344) = 315f4c595e24250ced0910bcf5c3b6df (name+title)
GUIDs
40
Filler GUID seed
new Random(513).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
30 · predicted N = 40 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302252344 (name+title). Key = MD5(password) = 315f4c595e24250ced0910bcf5c3b6df, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 7e84a06e-9ded-67af-a256-bc39aa6993ec
  2 d0d26d3d-4da7-32be-824b-7e1cf4036232
  3 fe608e4f-3cb0-3795-835d-06ce7e42365e
  4 79ffe368-b0d3-0be1-a41c-9dd30a43a202
  5 189f7238-f3d4-74fc-bf1a-ac49ccf2cf49
  6 d9e1da5a-0dac-7b44-ae5c-2554a791a3b4
  7 0b148dfd-0265-666a-a59a-a1860d3aa6bb
  8 9be912bb-4b63-7273-8b60-00a9485adcb2
  9 1a263149-c8de-3840-b82a-222d216c6d6c
 10 3c114ed4-6c99-39f6-9747-1019038cce33
 11 437edf8c-f3cc-202f-978f-1b6c79c47b7c
 12 4e0d229e-9829-86b3-bda1-acfac0cddfdd
 13 af15860f-d7a0-254b-ae00-620c36134526
 14 113a715d-3ef0-3142-8e74-2baf0614632b
 15 5420fe81-a373-0c6e-8f4d-d265a063184d
 16 3646cdfd-a188-3e22-b178-e592ad425262
 17 a2a88134-7ead-481c-889a-5725337e990b
 18 6b240d46-c6e5-077e-91ca-ca7f83b95d53
 19 4703d229-a580-5294-b23f-a7d4515f0e28
 20 17265287-2971-8abf-be32-76d547f5a9fc
 21 e22db4c1-f5d4-8a2c-82c9-5baf9597b3e1
 22 a6d05fe2-768c-6746-a7fd-596b9b9dd783
 23 3eddee75-b249-6dcd-921c-e70bcf2d1bef
 24 ae3d5949-19f0-2d12-baa9-07baaaec416f
 25 62dc923a-dd3d-86cf-aa96-38b2feeaf78f
 26 98e518dc-25fa-4ea4-ab2b-8549f7d8aa05
 27 be167b2f-2e67-818e-9bde-474b8553ddca
 28 a77e8575-ce22-4ab4-8c31-1db04aa2fb10
 29 cdd34da2-e653-2643-bf41-3dc6e2302b65
 30 95f6ba22-6156-2ded-b63e-2af47e785ab4
 31 169a68ca-2447-51b6-bbb0-e2050eaac0fd
 32 38679bbd-636c-5ff9-9573-13c4af2376ed
 33 60172a98-e373-5fe7-a11a-c18e00e6f0e5
 34 c257c2b8-f440-7315-a15e-b02f5df1d0f0
 35 45ada59a-3dfd-63ae-8dbc-700d0dce1b0b
 36 129127c1-4bc3-81ae-9015-e10d767be9f4
 37 f36b2330-5a2a-8c28-9d31-764eb724a12e
 38 8bd32555-1e46-8223-8276-04dc12e2f930
 39 fb18c0a5-dded-16dc-9076-44303dbd009e
 40 0ac3d6d1-9193-2493-b4c9-58371e84bf3d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6330776733282303405886628484225557688812. Exactly this sequence comes out of new Random(513).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 30 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs