A858DE45F56D9BC9 archive

201303281634 1b5xlb

explained decrypted filler

seed 775

Metadata

Post ID
1b5xlb
Title
201303281634 → 2013-03-28 16:34 on A858's clock
Posted (UTC)
2013-03-28 06:35:00
Timezone
UTC+10 · title 16:34 against posted 06:35 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303281634) = d80caf1106bd785b481de5b92614fb32 (name+title)
GUIDs
40
Filler GUID seed
new Random(775).Next(9) ✓ verified
Run
Run 43 (seed 120,022,078) (seed)
Draw
33 · predicted N = 40 ✓
Machine boot
2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303281634 (name+title). Key = MD5(password) = d80caf1106bd785b481de5b92614fb32, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 4c32c78b-f96e-503c-b489-385c310dae4e
  2 f6aa6742-1a50-12f1-aba9-508104963a87
  3 5d95e286-98d0-4793-ba2b-f6393140fe79
  4 50f32f96-c3b1-8ee9-b9cb-5c08448d7061
  5 73c525d2-58e7-015f-9f90-d9b212772682
  6 c0ec5272-5220-78d7-8879-fa28a0d72944
  7 e6a412b5-6bc9-133b-9612-a0e4a1942c8b
  8 26c9f221-37a7-23ad-9ef1-dd3d315dd3c9
  9 2e07727c-0118-74f0-b29c-a18fc5965e58
 10 16461902-9784-0044-96f9-d320d73973b6
 11 f47891ad-1a5c-280a-bacd-d1297642b91e
 12 209090e2-95b6-4d51-a39c-44709a4f80af
 13 a63bcc0b-0db9-3a65-a858-4fcf66a99372
 14 04b34a38-f885-67e1-8e50-dc99cf16c120
 15 48b920bf-139a-4a7a-901c-24094868f1c2
 16 135db2b8-6832-05db-bf22-d5ec7d97e24f
 17 5737836d-8c46-551e-98d4-fa1dde3927cd
 18 397b17da-0f44-4883-b4bd-63ea67b6889f
 19 2b8dc74a-5a24-5046-89fa-efec7e6abe16
 20 e2dd9649-83b7-3a03-9586-a6862d7ebb01
 21 dd0c76e3-a860-7682-b976-99f68444f440
 22 03244aa7-19fe-85fd-8a3d-4422730fee21
 23 518cc0d9-a9bd-873a-ba1a-c95eac4fbb83
 24 deec7a1b-777a-6e31-8270-f58338508102
 25 64797890-9959-50f8-bd2b-f33b44bbcdc3
 26 884d2d0e-385f-8339-a879-3b8e56f8a30a
 27 f1033354-d82a-2cfb-8111-750d64da900e
 28 bcbd2cb2-1142-757d-b0ee-2636c61e02d3
 29 b5bcb49e-f9d2-5ebd-b4ee-df423bd71426
 30 9f572bfd-4664-2207-8ae7-d63b62d04ea9
 31 23372647-7a2e-25f2-a20f-7cb9bbb963d5
 32 f7fc0880-cd4d-5f3d-a22f-5b1e50c6808e
 33 ae785959-40d1-84e6-89b1-58723b7a476f
 34 1e12a5ad-f362-394b-bb58-3871f91976c4
 35 13510e92-c527-2c34-b9ba-65ac8c36534b
 36 7aceb291-d0a2-32f8-8875-c07ac81f6581
 37 8f45815f-f9a7-050e-a820-a832cd02d708
 38 6fc68c1b-0b8f-4316-84aa-886a1cec6988
 39 66ee99f6-697a-09bb-9ad2-a85ce93fc813
 40 d261a5a5-562a-0013-a149-9df7ae48ebcc

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5148071270243640545378865827522583230400. Exactly this sequence comes out of new Random(775).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 33 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs