A858DE45F56D9BC9 archive

201303030508 19kkzq

explained decrypted filler

seed 555

Metadata

Post ID
19kkzq
Title
201303030508 → 2013-03-03 05:08 on A858's clock
Posted (UTC)
2013-03-03 10:08:52
Timezone
UTC−5 · title 05:08 against posted 10:08 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303030508) = d746612e80d500a94d8363da095a4920 (name+title)
GUIDs
36
Filler GUID seed
new Random(555).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
144 · predicted N = 36 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303030508 (name+title). Key = MD5(password) = d746612e80d500a94d8363da095a4920, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 42b34192-9295-6113-960b-483dd3f789f6
  2 55fef378-2c31-533b-9772-3bdee0bf8953
  3 e1fa6c14-8abf-63f1-981e-b553b98bb6f7
  4 7822791f-8d32-0c11-80ea-76d3071c5f09
  5 4eb61741-fbdf-7f4a-84a8-b4fc5b2e04b0
  6 ba28ba48-6539-504e-b523-332cf6d066ac
  7 ab4992a4-d289-5bc7-b8ed-82a1b93d2806
  8 2f901df5-e006-77d8-a2b5-4d91d1a4bff6
  9 4da9230f-ff23-5a66-a165-707906ea9253
 10 a69f85cb-2c37-8b9c-bbcc-e2c207e1b084
 11 7d2638b4-4181-1445-b698-1ef3e9d74ee7
 12 c5baec60-2a24-6110-9420-6a6bd2da0164
 13 19d8ca39-70bc-1b5b-ba6a-b11aead2f411
 14 0f55fff5-c1b3-1d3e-ab11-be1529359d25
 15 b63a703a-ca2b-4cf2-a773-737e6e3f0c18
 16 c07d4604-365a-5018-8ab0-3c4be45c2060
 17 5d7dc7de-b3dc-1246-9f95-8a03d4ec4016
 18 298f48ff-3a51-0e43-a1ba-1c8df6105c97
 19 f81bb186-affc-6c30-8153-63d5996fa74f
 20 d75a4b0b-6d45-1946-b321-b77b2adb66d1
 21 4fe4e4ea-869e-50c9-bf41-40afc6b0c73d
 22 138bacbe-79f9-04f2-a44b-c57b88642c15
 23 e327d2c3-b5b0-739e-88c9-678a4d36b403
 24 3680dcef-d661-8e97-b433-4196d86b00dc
 25 49cb8fcd-d936-0752-9449-4bb2d620b03e
 26 aa5a7db7-1266-4aad-bd53-4bcd09f55461
 27 acb1bcbe-021b-0c39-b5f3-8cad2d29bd1d
 28 cff0ed09-0de9-55e1-bd7c-b2334362ccb5
 29 2255aab9-d534-7c2a-bd74-d36ec4129780
 30 ba2679dc-5230-05e7-9033-1a0757db17a1
 31 b08e1e98-4092-01c7-8078-d8f9555a3eab
 32 d0edb094-84c0-5b3a-be10-c3cce0d2bae9
 33 7752821b-fe6a-4a39-8a37-181a329b86b1
 34 4d0254f7-885b-875f-a8b4-fb48b925b70d
 35 f5043400-84a5-39b7-b2f4-a5416b7075d4
 36 353e4a9e-2172-7eb6-adca-f3f41172298d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 656075575816114510615078040570054837. Exactly this sequence comes out of new Random(555).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 144 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs