A858DE45F56D9BC9 archive

201302271308 19c8jo

explained decrypted filler

seed 8

Metadata

Post ID
19c8jo
Title
201302271308 → 2013-02-27 13:08 on A858's clock
Posted (UTC)
2013-02-27 18:08:57
Timezone
UTC−5 · title 13:08 against posted 18:08 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302271308) = e07804da7b1aa7f58a0c5339bcdcf590 (name+title)
GUIDs
36
Filler GUID seed
new Random(8).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
64 · predicted N = 36 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302271308 (name+title). Key = MD5(password) = e07804da7b1aa7f58a0c5339bcdcf590, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 877207da-c786-8a41-9ea7-8111b2c9ce72
  2 df1b9c79-d00f-1af9-a96b-552bfef47cbd
  3 3173d57d-9946-355a-b8ac-902e920aee18
  4 996ebf9a-811d-2b5c-8293-3fb5040996d8
  5 8407b18d-115f-7e4c-a237-606037056164
  6 1cca09ee-a782-4183-a3cb-8c7fbb3851dd
  7 ca0d0046-91c7-425a-8e95-0551bb65669c
  8 b080bb82-6c01-40ca-b01d-84b56cb1182d
  9 b1a7dadc-4398-8f75-9bea-fb1e41709007
 10 2984c409-7fa5-24f9-9e6c-fe5a186812d9
 11 9e15b536-a5e7-1419-b334-70be88f629d8
 12 a72d4ef2-2f89-6fbb-8c01-9bc8c632716b
 13 058f03ac-a618-14f5-bd14-2e035ba39223
 14 07272ef8-d834-56e7-b272-fa9a7142d2f3
 15 2df20680-09b6-5dae-b9b2-03dc7f07997e
 16 247b39dc-e523-0f1b-b87b-13be426a956b
 17 11a3e736-c68f-2a39-a7a7-22e1a95a7ab1
 18 9d92a103-3752-8faa-9867-8bbed72800c8
 19 4c0abdfc-b571-8253-ab1e-980751ec714a
 20 b6913053-46f0-338e-9d61-0685080d7e04
 21 9b9489df-c8b7-7004-9b0e-ecb8176dfd83
 22 8024d46b-c87f-72ca-a94f-c189788bef50
 23 5244f5d1-c985-32b8-85ce-b21e45f7ac92
 24 dcea4737-0db6-788f-9b56-449045157f24
 25 5c25fb38-d588-46b8-8b7d-acdeff928997
 26 7c633750-dcb0-63b8-89d7-8ae03ed862cc
 27 e934ffb0-ea4d-7652-8a88-8397f05450b7
 28 499bcb6e-1693-5292-999f-fe43b6c6d9b2
 29 f40ae5db-c04b-6dfa-81d5-801878ec1f02
 30 1f51c717-927b-47ba-b74c-830246e7a931
 31 1b72ded3-5884-1b13-96f8-112dcdbbbe81
 32 80b7b6c9-d188-51fc-aa13-109f4f4ea3f9
 33 17e3de0d-5699-42fc-b4eb-f8e8a0efea6c
 34 456e8cec-fa3b-1397-b5d9-62687c2d9e7f
 35 51cc66a8-e418-3016-b9bd-93a9a82bd84f
 36 eaf27431-686d-0688-a72f-d392431f74b0

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 813274448216155028837737467564154130. Exactly this sequence comes out of new Random(8).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 64 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs