A858DE45F56D9BC9 archive

201303300324 1b93ey

explained decrypted filler

seed 362

Metadata

Post ID
1b93ey
Title
201303300324 → 2013-03-30 03:24 on A858's clock
Posted (UTC)
2013-03-29 17:24:59
Timezone
UTC+10 · title 03:24 against posted 17:24 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303300324) = 82c9d64617e5ed7e40dda390b80b8661 (name+title)
GUIDs
40
Filler GUID seed
new Random(362).Next(9) ✓ verified
Run
Run 43 (seed 120,022,078) (seed)
Draw
71 · predicted N = 40 ✓
Machine boot
2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
10 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303300324 (name+title). Key = MD5(password) = 82c9d64617e5ed7e40dda390b80b8661, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b19cb3e2-53f7-7e6e-9abc-53fd6bc0be0c
  2 38d54e5e-ac75-0e6f-90ff-426c8070d8d6
  3 11879e84-fbc9-77b1-9bfc-4e32d22de469
  4 f02c0749-0668-7ee5-a438-8f1faabb65d8
  5 196cb158-f67e-5840-a490-4c9a8aaf13a5
  6 95f9cb21-9fe2-8e5c-bd0d-4b36516c1046
  7 d1d58d7f-d5b1-097e-ae96-b096e75235e3
  8 495f5d74-ab86-0288-bd41-7599149dd552
  9 8f389648-3b7a-653f-9700-d24cd0648af0
 10 23bdd1e9-8b24-6841-aba5-3966120b7218
 11 01561655-f47c-81d7-a4e7-5862ed776d08
 12 9cd952f7-9d79-0153-9e57-2c951eda61ef
 13 f895ce38-5fd5-4ffd-865b-c21cd9d10805
 14 9328c2c4-969d-7765-9994-36e24e7d22d5
 15 6bc49a1a-0898-3dff-9098-dc9f07697d92
 16 d4f6fd11-7da1-04b5-bce1-3a5845f22c33
 17 1ef06e91-6da0-0bb2-a9d0-fd17264140ee
 18 7d6f9fad-72c2-3845-934d-9c1e07aad456
 19 31ee63aa-50e4-4166-a342-f11104b40080
 20 d917e5f7-8acf-4ee6-ba3e-5c5c719ddc3e
 21 d38af41e-33f9-86e3-8c1b-5a77589e02ad
 22 650bc98f-e841-5f74-b109-009593257fb7
 23 6a37d5f1-e5bb-1bcd-ac44-9f03deee53c1
 24 e32f6aa8-c920-4d77-8091-11e1cb78cc71
 25 a9a074d1-c317-1e56-a293-c073934ec22d
 26 7b56371d-7146-3a88-9ba3-fc5c72f806b8
 27 db209e28-9b89-1d26-8cd7-d8f69b6cfad0
 28 a0f5da80-0ba5-8e40-9b23-bf82b92cb036
 29 83d6743b-7da3-4aec-8561-264c47650047
 30 d38dab2b-63cf-50be-b4a5-69970e3fc0fd
 31 28821952-126d-7ca2-9b7e-a307b6c85f13
 32 272a94b7-e405-726c-a41b-8ffed8e7160d
 33 98cea77c-f528-74d7-8e4e-64f59b9c640b
 34 9177d7d0-d8a4-0397-b52b-cf9ceefba8b4
 35 fe7c05da-9b9a-09e2-b6ee-d82cf591c493
 36 6e3a417a-e8cc-4a4c-b195-f3b0b8c69238
 37 887bf41d-29e2-8fd3-99ec-1333b222ce34
 38 35b600cd-2d9c-0180-8982-d78337cc5add
 39 470f2021-73e1-3b8b-a249-8a72f1dca6e8
 40 ffb2d9e1-d427-463e-80c4-c0e7f7769fd7

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7077580066804730034485141318457770048034. Exactly this sequence comes out of new Random(362).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 71 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs