A858DE45F56D9BC9 archive

201303021914 19jsrj

explained decrypted filler

seed 93

Metadata

Post ID
19jsrj
Title
201303021914 → 2013-03-02 19:14 on A858's clock
Posted (UTC)
2013-03-03 00:14:54
Timezone
UTC−5 · title 19:14 against posted 00:14 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303021914) = 920673e17e16266262a98541e0b62a17 (name+title)
GUIDs
32
Filler GUID seed
new Random(93).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
135 · predicted N = 32 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
14 · 5
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303021914 (name+title). Key = MD5(password) = 920673e17e16266262a98541e0b62a17, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 6095358a-8256-2493-a48f-ebe6f02b05ff
  2 fa1c1fc2-2ef8-081a-8569-06b33c5e9bd4
  3 a57a4512-7946-6134-99aa-06c9c705dade
  4 01526c48-c68c-37a9-9286-4b2a574e8349
  5 0ba6dfe1-f978-1168-85fa-d5ed56af74ab
  6 e2b3194c-8d49-7c8b-8b7c-520ece0d4ff2
  7 0a46f2d9-1d45-5459-9f3e-6078f9a921b4
  8 7276c380-1491-0bb3-80f0-e964bba4146a
  9 b27ff19d-75f2-466e-b89c-3a23abfd3dde
 10 e59aba60-8931-5423-84fe-109ddb33d7be
 11 9245c3cc-5dcb-7a01-806c-b23499f59c05
 12 4d99343c-cdb4-039c-b148-4bced8c6c645
 13 2291cf8e-6408-52a0-af1d-184ad0291444
 14 f556f7f2-30bf-7393-9e32-d912bec7bb47
 15 a2df18a3-b5d7-06c1-8998-97aa1f9ac900
 16 00482d37-12be-0851-aa09-23036820a4a9
 17 3490c519-087b-8ff3-8685-6700cae8fedf
 18 a5c7009e-b590-5edf-8f2d-cda44fea0cdc
 19 aae74e76-dee2-179a-8136-5caf9cd07d19
 20 0ab1febc-118e-2732-8c1c-e43606314024
 21 eb569978-aaed-1c01-ad23-ce24d013a3f7
 22 aafddc30-b837-5f90-8a8e-a64a07118d96
 23 d0b27376-b79c-6942-9966-3492928d7951
 24 2178bd18-3a56-49c9-a5ec-ca2c529291c9
 25 100e3e9b-bd13-7b8f-acc4-eeac96b6cfb3
 26 fd1fe1af-ec2a-325a-a239-36b2fdc008cf
 27 eadfd3d5-6343-875a-8d21-0d0ef53ffb1e
 28 c76264bc-ac5e-26b9-b6fa-460a3a61da92
 29 e76cfb87-929e-21db-8f7b-7d7c9c62a5b4
 30 2238f3dd-c62a-8749-b4fe-b7f5068b8a06
 31 700f8e34-a448-4ac7-ac2f-993fc61d8b7d
 32 25925246-c74a-8a6b-b599-9203ba0f51c7

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 20631750457057008512156473822848. Exactly this sequence comes out of new Random(93).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 135 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs