A858DE45F56D9BC9 archive

201303061538 19sp78

explained decrypted filler

seed 369

Metadata

Post ID
19sp78
Title
201303061538 → 2013-03-06 15:38 on A858's clock
Posted (UTC)
2013-03-06 20:38:48
Timezone
UTC−5 · title 15:38 against posted 20:38 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303061538) = 45e706237771572d7892fc4777c9a168 (name+title)
GUIDs
40
Filler GUID seed
new Random(369).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
219 · predicted N = 40 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303061538 (name+title). Key = MD5(password) = 45e706237771572d7892fc4777c9a168, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b83a71f4-62c0-49b4-a830-eceb625696c2
  2 8cc2c439-ff49-03f4-98b0-3fc7b8288999
  3 2d882669-b758-629c-9b13-cbd801f26407
  4 ac849bd7-7a1a-2d66-af6e-50d992e67907
  5 3ead4faa-5850-7802-be1d-7c04c9c62932
  6 e3e74fcf-e078-0e65-8719-376eb4f07f6c
  7 6785f96d-31d5-202d-8338-a4fd0d7e28ea
  8 bfadda28-4472-5fe0-a429-afd11c3f3e46
  9 3b715ece-e8e3-548b-b249-b4897bbb3722
 10 fdf6b355-886b-3d3a-8dd6-0d8fd272ff9f
 11 0b0fc1d0-eff2-17c5-ac3e-c7a8ea39ae45
 12 fa05cfac-ad7e-4ffb-a9f5-81beb7bd3426
 13 40239f8d-fde0-2f3f-81c5-06291140df1c
 14 5ff4eaf9-0933-3595-9cc2-ea0684bd801b
 15 e4c23cc7-a4ef-2b35-b680-12f31d56e314
 16 6db0a475-e85b-433d-9e5f-4a6c9658a8d6
 17 cfdf8ed7-a874-8502-84fb-bc347face0df
 18 60a61f2e-0aba-676c-9170-a5e2cb2fce55
 19 104e2aa3-ae6f-5a98-bac9-4599ee40778a
 20 c006eab1-481d-1c38-8cd8-3bfefa95d543
 21 378e90d6-ea6d-7321-9561-772e500e1539
 22 26abbd6c-bbc9-3255-b80f-f31709b62402
 23 1b6ead8e-76c2-3896-bb9a-2a2a4c79e4b5
 24 fda17305-925a-86e6-b673-3dcf101a68ad
 25 6257758d-b390-7390-b6b4-f609f02bdae9
 26 011ed73c-1576-7037-85cf-3c122074c14a
 27 feac5f68-666d-1be3-8eee-60709d5545b1
 28 60fc5c09-eff2-2114-a87c-5510b6f4c88e
 29 84c2f5ca-5bed-46d1-b954-f0a0bebc3616
 30 ccf21174-aaf2-2f05-ad02-5475cdcdf484
 31 76a7d78a-8e1e-3d64-9877-c70b6bce5c09
 32 fc6d0e77-2b78-5d7c-b3ab-be74ab3fe0b2
 33 40f25cb1-9efd-6a63-b42b-ab42f30d749f
 34 62185cde-bfc3-2e5f-b506-8ecd7029ebf4
 35 940c1497-0564-48cd-9735-5e69c39cbda8
 36 96680b9b-7185-6582-9857-dbb5d7cdb0b9
 37 d0acf101-b0b0-6c20-80ec-3bcf5b82650f
 38 d7c4e053-bf2c-7d31-b633-5ac7b450820d
 39 22754262-b365-471c-99ef-ea7b63012cac
 40 79090770-e7d2-4ac8-a86f-c23515c5803b

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4062702553142324865173387712423562466744. Exactly this sequence comes out of new Random(369).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 219 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs