A858DE45F56D9BC9 archive

201303270959 1b2s71

explained decrypted filler

seed 282

Metadata

Post ID
1b2s71
Title
201303270959 → 2013-03-27 09:59 on A858's clock
Posted (UTC)
2013-03-26 23:59:55
Timezone
UTC+10 · title 09:59 against posted 23:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303270959) = 9fa75376cd25db2340625f5d206bf01a (name+title)
GUIDs
32
Filler GUID seed
new Random(282).Next(9) ✓ verified
Run
Run 43 (seed 120,022,078) (seed)
Draw
21 · predicted N = 32 ✓
Machine boot
2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303270959 (name+title). Key = MD5(password) = 9fa75376cd25db2340625f5d206bf01a, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 55e562a0-249d-0564-8330-7a7bc42515ce
  2 ab23b2c1-64f7-5ac1-867e-0293cb12bcfa
  3 cd1b4c67-6b7f-7ff4-96f1-61d2b5bbe71d
  4 943cca6a-e8d5-6263-92b8-702cd91d7844
  5 68b653aa-3589-4fa6-bfaa-2ee98fd44d6a
  6 6d115ab6-628c-8cca-bcc9-7ef399e7a8a8
  7 f408ea62-9307-28c7-aa18-55394f9fa94d
  8 da24e24f-14ce-8fdd-b3e4-9fb8285e3ef2
  9 efc159f3-c994-779b-9a60-a585754568a1
 10 e476c726-fbb9-208d-ad70-186fc7c510f7
 11 f5208b81-ceea-05f8-8c03-6a5108c7fb28
 12 6f7d8857-dd8a-594f-8cca-6299791c4202
 13 bc2eb3d8-4569-4ab9-a5cd-986ded2518a9
 14 9ffc5bc8-407c-1624-b831-afa920e27ff5
 15 8d6f8796-9190-3648-908a-db789fbe1ce0
 16 194d6921-dec6-137f-9053-73ce0fcb8ccb
 17 9dc7d40f-e6d7-3552-a3c5-6d04ca537ebf
 18 591b0795-6cd8-7432-a30a-ce6f4da6c72d
 19 c10aab1e-2032-207f-8f8c-71edc64d0b79
 20 4dfc655f-22d7-4252-88e3-9c2e0e38f7e3
 21 0beb0ef7-ad99-2213-b6dc-d1af60debc35
 22 8345b382-916a-02b6-b14c-ddb4bd410672
 23 88b107ce-e6c7-5f1c-a9b6-82ce2f125ef6
 24 cd54ab68-a5bd-4d65-ac79-72037da8fb0a
 25 cd82ce31-53fd-35fe-8b03-e04518b14382
 26 1434d82b-a405-8033-861a-4c79002e09cf
 27 db014d83-fb5d-38e4-beaa-fbd6743e5ff3
 28 e99c642c-21c3-3f08-b0ce-755a39f26fc7
 29 edca9eba-ad0b-35de-bc82-2ba9146d0142
 30 3b5082b1-4220-1c0b-b449-a8629dda8960
 31 acf102a1-f81b-27ac-b8e1-37bfb330de23
 32 d78b0561-5a1f-6131-abee-3ef901ea6329

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 05764828720541313724205438333126. Exactly this sequence comes out of new Random(282).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 21 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs