A858DE45F56D9BC9 archive

201303031038 19kusx

explained decrypted filler

seed 246

Metadata

Post ID
19kusx
Title
201303031038 → 2013-03-03 10:38 on A858's clock
Posted (UTC)
2013-03-03 15:38:52
Timezone
UTC−5 · title 10:38 against posted 15:38 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303031038) = 2b83f680fcbbea1bb367782d66a8dd5d (name+title)
GUIDs
32
Filler GUID seed
new Random(246).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
149 · predicted N = 32 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303031038 (name+title). Key = MD5(password) = 2b83f680fcbbea1bb367782d66a8dd5d, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 75831b7b-2d1c-2caa-80ba-2ba6851a431c
  2 10718286-be67-88da-a81a-79f3cb460494
  3 90e8d5be-e35d-69f0-9b20-be282ffa625d
  4 576917d4-9ff2-0500-92d3-495037dfdb7c
  5 9bea061c-9a6c-2878-8014-db22c513f2fd
  6 981211e6-9056-42f6-a0a7-e332ac57b409
  7 60238df2-9ac7-16db-bcb3-65e72a4e7508
  8 b235fe8c-1e06-7f26-96ea-4fa03aa9ad82
  9 18d10240-d339-3c12-8945-568d4156dc69
 10 75fb5b5d-717c-8801-9823-3edeb4d4f6ea
 11 8572999e-8c8a-4ece-90fd-5a4b263ae2fc
 12 8623e64c-8c60-4c53-a4d1-a39d78e4eef3
 13 66fbe996-8ca5-6c82-8f62-ca7113fde36b
 14 66feea8e-8afa-4e74-817e-29c132de13f6
 15 f6dacda7-9af0-1e50-9c04-307800cc47c1
 16 94140690-7d8c-5803-8e55-97d86b7e5a88
 17 d1a8e0cb-825c-2f38-aca3-12afe037e4d2
 18 3a5b800f-d895-4da6-a0b7-ed697b1d506e
 19 5edaf71b-0e12-3115-94c6-eb7ef359fa41
 20 5dbe0c82-9b7e-555f-8500-e37905b317f7
 21 770949ee-d193-4bf8-aafb-2b50404454d4
 22 e5efc9ed-3fdc-16db-98e1-1b3b8d320492
 23 cb1b1291-4d8c-5415-ab6f-b993f62620a4
 24 70da903e-f747-8cf9-a245-2990fd7e6a41
 25 620ffd31-5740-7971-963f-063234aa7d0c
 26 9193eff1-4da7-6cc1-bf87-bb877fea1906
 27 34b5fc8d-9f1c-3781-94fb-757a52cbae13
 28 271c705e-bea6-1232-89a8-41e29f17a558
 29 d30b255e-f029-4f9a-880b-aa0e5e11ef64
 30 a9f6064a-a39f-107e-b232-dda552b690be
 31 ca9223d7-4312-0ea6-806d-6910720a77e0
 32 ee190831-b0b5-2fdf-aebe-5819bd323c2d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 28602417384464152435415876314102. Exactly this sequence comes out of new Random(246).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 149 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs