A858DE45F56D9BC9 archive

201303291814 1b8djm

explained decrypted filler

seed 735

Metadata

Post ID
1b8djm
Title
201303291814 → 2013-03-29 18:14 on A858's clock
Posted (UTC)
2013-03-29 08:14:59
Timezone
UTC+10 · title 18:14 against posted 08:14 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303291814) = 180a83c58052bfc19195755df0c2b3f2 (name+title)
GUIDs
40
Filler GUID seed
new Random(735).Next(9) ✓ verified
Run
Run 43 (seed 120,022,078) (seed)
Draw
61 · predicted N = 40 ✓
Machine boot
2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303291814 (name+title). Key = MD5(password) = 180a83c58052bfc19195755df0c2b3f2, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 12b5069f-80c4-64f5-af99-6bf55e0d7e5c
  2 5ab597ba-4cbd-4e27-88d7-081e22ac84a5
  3 527f9d1d-6ffb-4d5f-984c-e192d026112a
  4 e59321af-c84c-31db-919d-e9f9f2f43a1f
  5 92449827-1edf-0638-8910-332d1ea495a1
  6 c9b8e4d8-af80-7acc-8aab-c10aa86539cf
  7 e6d4087d-d3bf-2e1f-b9a4-be116cb9c5c5
  8 524bf2d8-e624-1d2d-9f3e-0e51bcc86ee0
  9 11248302-b449-8466-8aa5-d002a91509fa
 10 3305001b-c5a8-2ea3-825f-08d0c319e9d3
 11 27e1d532-1f41-78de-85b9-cbd5ee30fb2f
 12 f7abe820-1b45-2043-a908-3013e9d89286
 13 6bdfa680-07df-8b43-88a6-1ffe41bb6b57
 14 2314d021-170d-7620-ba3c-c97c541dca0a
 15 575bc638-5de9-4f16-9e4b-b9b476a9ea2d
 16 a890b2cc-3732-0dc7-868a-21542bdba2bf
 17 4249db3c-36f8-72d5-b894-b51e3b84b0ed
 18 83d8a95c-bda3-617a-a181-3135e7bf0538
 19 a31769af-2828-5f94-a1da-c6a091c055c1
 20 a1ff63dc-078b-8e09-aa8b-ddc0cfd7f123
 21 4d0465bf-9d6e-4cd8-bfdb-c61803f11c32
 22 edfe3658-4f12-17c2-9396-dcb604258cd7
 23 a7ebe94d-b8d3-1fd1-a9cf-4292517b54f3
 24 26fd785d-d451-7dff-92e5-196373578291
 25 b506943a-8604-694b-a0da-e54d6ca8a628
 26 82a3c521-3583-2000-88bf-95d4523c5002
 27 1269bfb0-7ed7-7bcd-81d8-9312c95173f1
 28 2e554282-212b-0f27-baf5-6e894e13985f
 29 5979255f-1497-5dc8-b13c-27c3a3a2e621
 30 80f8b2b9-477f-0db3-bcda-951f4ee32777
 31 0953197a-9371-4c20-8fa9-4cb6389f8a72
 32 63e53945-0b36-0dd9-bfc0-6afb29fa87c9
 33 a6d3aaf5-6c44-7a03-b76d-4fe61ea2b199
 34 1bc62a57-d3c8-3f12-9bad-7ad1753bbfaf
 35 1add4c02-d4d3-23e2-a775-9e9aa353d9c4
 36 bbc008bf-8ab3-5908-b722-4ae313da9cf9
 37 d3a4adaf-881f-7275-a66e-c6700d4166f7
 38 ab994e46-4451-2442-8eff-6365beff19d7
 39 cc78027d-0856-1d67-9e17-80b589b09c7f
 40 ee85e8d1-7f93-22b7-9a27-99a503056664

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6443072182728740765841176270504073257212. Exactly this sequence comes out of new Random(735).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 61 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs