A858DE45F56D9BC9 archive

201303301519 1baexy

explained decrypted filler

seed 976

Metadata

Post ID
1baexy
Title
201303301519 → 2013-03-30 15:19 on A858's clock
Posted (UTC)
2013-03-30 05:19:58
Timezone
UTC+10 · title 15:19 against posted 05:19 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303301519) = 288a185f748e480d4d0190eb71ec37e7 (name+title)
GUIDs
40
Filler GUID seed
new Random(976).Next(9) ✓ verified
Run
Run 43 (seed 120,022,078) (seed)
Draw
84 · predicted N = 40 ✓
Machine boot
2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303301519 (name+title). Key = MD5(password) = 288a185f748e480d4d0190eb71ec37e7, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 078fb82a-e095-5ddc-9f28-4898922a2445
  2 bcc7cb9b-f7d7-1110-a491-bd63f53de3c5
  3 6152e12d-5e3f-837c-90d9-748430bdf560
  4 fd5a8102-75d8-788a-ada3-348ff90c00ba
  5 cae7e7d6-5067-7519-8663-79d3c767e1bc
  6 a98c6cd1-00e3-4a84-931b-640c22ac132a
  7 223d78d7-8126-1378-924f-707ba3db3b10
  8 2a506ccf-b036-05df-8dca-4907d08ad893
  9 35f9bc6a-7318-6c43-b5db-128694cd0759
 10 f3163cdb-9666-16bc-a88d-e5d595b588d3
 11 1cbc074c-5d2e-343c-a68f-5e162eb3d8ee
 12 c79f7922-7291-49b3-bf7d-60a05d353610
 13 2920f9d9-cab1-59f4-afc4-4dca3e228e32
 14 5c776c50-1b10-2781-bd21-fe57690a4214
 15 2a7edc3f-f295-11f9-b78f-461e6b452bc1
 16 080e3c4d-a1e5-508b-8e44-d9b8f89b1bc4
 17 419ef831-7063-18de-bbf4-fba3821dc83f
 18 95b38c66-fdce-1ab7-9f67-73902bf679b7
 19 7f9fa45b-fde1-0f8c-af2e-02ebd0b68f3f
 20 3cfb81bf-6784-260a-8edc-69930485b6be
 21 a6fd556b-2e62-4131-9aca-f6644f75a571
 22 b33d3d06-029d-2ce9-9914-c8dc69c0173a
 23 f2dbc13d-1d40-8474-92fb-1b5bc08ec3d1
 24 48920402-3d84-86b5-91da-0fb3bfcb0482
 25 14ea4b83-f13a-35f8-b317-4a308821df21
 26 37cc3b32-f0fb-2943-8436-7effb3a24480
 27 c2a58dc3-e093-047e-99d8-2b3e654f1526
 28 fe3f2dcf-eec4-3e79-9d0a-7d48477987da
 29 1a8ffd16-da21-1a79-a9f5-f0bb7f8db757
 30 711f469f-4fef-1533-b1f0-f9e7eed96d77
 31 d70f8407-e42d-4140-9fc5-68e088d5f0be
 32 5e54308e-08b7-4216-9198-66657c5c7b32
 33 33cc5102-406e-6d36-bf27-69d7b0d35b7c
 34 732d0faf-de08-4908-97bf-fe91aa98061f
 35 02189513-92b8-314d-99cf-58962feae584
 36 97c1fb73-2820-008e-b3e8-2091db0d56de
 37 f9c3270d-1d96-4bd9-9639-423f5cdb3351
 38 27538cbb-e82a-4456-ae55-47ebbf19afd9
 39 4b5f22f3-abf7-4d53-9665-a78898e4709b
 40 cf891002-6312-1211-ab67-d2527ba51c5c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5187741061345215110242883203114464304441. Exactly this sequence comes out of new Random(976).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 84 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs