A858DE45F56D9BC9 archive

201303010802 19gkvc

explained decrypted filler

seed 869

Metadata

Post ID
19gkvc
Title
201303010802 → 2013-03-01 08:02 on A858's clock
Posted (UTC)
2013-03-01 13:02:55
Timezone
UTC−5 · title 08:02 against posted 13:02 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303010802) = fd935ac1299d2952f501c89d8cf35200 (name+title)
GUIDs
36
Filler GUID seed
new Random(869).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
103 · predicted N = 36 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 6
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303010802 (name+title). Key = MD5(password) = fd935ac1299d2952f501c89d8cf35200, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 bddd5c5a-744c-62a6-bee3-bd38a5daaf3f
  2 9f9b66d6-5bb3-7e45-9c75-05bc8685fb9f
  3 3462fb26-0345-1ab8-8e08-a3204d4d81db
  4 6501501a-a5a4-0ea6-8f49-82818268b0a2
  5 77bf4d9b-5e4b-4dde-bca6-1838e2023dd1
  6 c10df3dd-e42b-887e-afb9-870b43b0ad63
  7 d6d4a5bb-5d2b-254f-9a45-61fbb3a3d28b
  8 c8697801-1956-399f-b0e1-1e00d3453158
  9 00b6094f-4063-4122-a299-9f823b516b05
 10 bcaec89d-2aac-6726-9aef-5b05aff5b5e7
 11 c34d823c-9463-4f29-a2bb-d7c91c408f73
 12 0b51565e-0099-8bcb-99c1-9c3153110a18
 13 76db2e81-e096-0c5e-897e-75e369144503
 14 873a261a-047a-580b-b415-18881b1c7eea
 15 d66e5b8c-83dd-257b-a5f4-7dbca75fc80f
 16 65560053-d4b1-688a-93a2-b8c7cf6ffb6d
 17 82c776dc-d092-1579-9661-de8f754c66e8
 18 4dcf5631-04b1-6a43-9f65-a25afdf25602
 19 bac44829-c1ff-11d7-a63d-e51c8669102f
 20 4e51205e-2049-70fc-9cfe-4d6b007346f1
 21 1208d1f2-9e06-2ce6-9afa-e01336a001ce
 22 ae375436-1c83-05ac-a292-c96a05ac4349
 23 e4a7fb01-f443-7903-846d-c109bfab83b0
 24 e8e5e1ba-5e07-5f4e-b227-b0e8a8e280bc
 25 9691dc4e-e45c-77a1-9c84-e079e0278d0c
 26 6971543b-8f48-44c0-a33b-26e82b155112
 27 73832fad-33a1-0eb9-8d07-9a6b04886dc3
 28 1d6a579f-790c-1d20-a5c6-22b9a3f112b7
 29 4a65719f-3444-5c5e-8334-06dffaff4740
 30 ed61321e-888d-89b5-aa98-fc29da04097d
 31 c4f37887-6e75-0f86-8d85-cff9cbf9ea2c
 32 f5cc0887-f21c-32a0-9367-4bbfd9495e69
 33 766a6f0c-8b56-6cc9-be2f-88a45698135f
 34 1ecc71b5-b41c-68c0-ad5f-a91428ba6c55
 35 5db2debb-ab1b-0f28-999e-37873423b136
 36 87686d04-6f91-3295-ba69-cf50a88721ef

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 671048234648052616172075740158036603. Exactly this sequence comes out of new Random(869).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 103 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs