A858DE45F56D9BC9 archive

201303301709 1bajjw

explained decrypted filler

seed 918

Metadata

Post ID
1bajjw
Title
201303301709 → 2013-03-30 17:09 on A858's clock
Posted (UTC)
2013-03-30 07:09:58
Timezone
UTC+10 · title 17:09 against posted 07:09 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303301709) = 739b607c921cd16a15e5a5b809c0e4d4 (name+title)
GUIDs
36
Filler GUID seed
new Random(918).Next(9) ✓ verified
Run
Run 43 (seed 120,022,078) (seed)
Draw
86 · predicted N = 36 ✓
Machine boot
2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303301709 (name+title). Key = MD5(password) = 739b607c921cd16a15e5a5b809c0e4d4, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 626f7f74-3dcd-2611-85cf-eaa1b0bfcaa7
  2 2de127ca-fcd0-124f-b7c5-84afa9c2c452
  3 6d149651-d488-388b-ab60-0e249292a852
  4 b68848db-2b53-45cc-868e-f14c6cc7402f
  5 53d51320-aa44-667e-b4bd-ddce15fec17e
  6 8cfb3bd4-ae99-7cac-9c44-ab05ed15f531
  7 b40791e4-6d90-1fd6-95e1-029fcae13f4e
  8 0fddb941-e238-8eba-9f0b-7ddfe27df881
  9 81d318f6-08a5-4fb6-9794-991db78a3dae
 10 e51ed859-32ca-7d50-aa59-976a17caaf1f
 11 ff03d657-d9c8-57c7-a917-2b92088642e8
 12 0e7e3316-a7ef-1355-b4c6-e243c421ac30
 13 ed377af4-fa67-6947-8748-6c32b43c75eb
 14 540b896a-e18d-08d8-b193-e9a7efa77da7
 15 3e9fce44-5311-5409-851e-c99794dc06ed
 16 465bc527-1434-3ead-89bf-a8a43626645c
 17 27348d5b-1cac-6c69-8bd8-735a4bb681f5
 18 8b07032b-ac40-1131-98e4-3acc1ae3d249
 19 4a6eafeb-dbf5-43be-9384-1157472ffb4c
 20 2a5416bd-de40-625a-815f-e550aefb118a
 21 6e2beefe-0c6c-7435-865f-126c14d50eb5
 22 8c8704bc-4c13-0bad-abd2-cc35cd108cb0
 23 7bbb1ace-cf70-1212-9ea1-68b9d6c97443
 24 33017c3c-6969-6135-9daa-9adaca69134b
 25 c2f0036a-e84b-6d16-84b8-0b6435514cd9
 26 870b748b-c8d6-85b0-90da-28cc645a532d
 27 48d37d8e-5582-1d08-a6b8-6421cb11942d
 28 dcb24882-df89-47b8-b4a3-a374ad105528
 29 8cc0d18b-c7ef-04a7-be6e-be44755556cc
 30 cf61281d-ebd7-3f88-9ee8-1736cd504d01
 31 06f791af-0bc5-0ce9-9e86-8189358a2673
 32 0cdb9459-09b6-2e74-8e62-809292cf82a1
 33 eaf2266e-0002-44c0-ac7b-96cd79d5a673
 34 9093071e-7d5e-0ee2-bea2-c77e229f9d7a
 35 ddf59595-4613-1857-a317-243233d7c0b1
 36 70b6ee56-6c81-4c71-ac3f-c6bbfa997760

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 213467184751605361467016681403024014. Exactly this sequence comes out of new Random(918).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 86 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs