A858DE45F56D9BC9 archive

201303310314 1bb62g

explained decrypted filler

seed 506

Metadata

Post ID
1bb62g
Title
201303310314 → 2013-03-31 03:14 on A858's clock
Posted (UTC)
2013-03-30 17:14:58
Timezone
UTC+10 · title 03:14 against posted 17:14 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303310314) = d05f2ace173cb6e0c9558671cde7a5b6 (name+title)
GUIDs
32
Filler GUID seed
new Random(506).Next(9) ✓ verified
Run
Run 43 (seed 120,022,078) (seed)
Draw
97 · predicted N = 32 ✓
Machine boot
2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
17 · 4
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303310314 (name+title). Key = MD5(password) = d05f2ace173cb6e0c9558671cde7a5b6, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 1b033574-6ef5-01ca-915a-e0b2dee2548d
  2 f0d3d88f-4963-28ea-8587-d807441b5148
  3 96d58760-1947-465e-b466-fc9244486307
  4 e712cea2-e753-554c-b685-9fc91e845dda
  5 58706f8c-d308-5d29-bf33-73c432065cf3
  6 f4f7768c-cf30-67e0-954c-2037a2bf7108
  7 f6c17b87-5ab9-5417-aef8-0a4d5f7729a3
  8 713d0c18-068c-2dc8-bee8-6a2656388979
  9 a4ef4bb3-7555-547f-ad44-ac8ecaf36059
 10 49a14423-61c6-7a83-aca1-653eabf27bed
 11 1c0ee367-878d-00a0-bce3-d104ed0890d1
 12 40d2eadd-a77b-49c6-87fa-a4bac989bc9e
 13 52f797fe-873a-4480-bc74-13f0cb15f562
 14 658882ff-cb12-662a-8dab-263de214bab7
 15 a03cfc53-c20d-1cb4-8def-ef4b380e19ee
 16 df9143ab-7c44-0cee-89ef-06511139d0c0
 17 421077dc-cd9a-52f2-a0e8-84a96b84ffcb
 18 a9b32c53-6bbd-6bfc-a174-1471b36e32d2
 19 9c672164-adbd-3755-9a73-46fd3d68981c
 20 569d6e31-bc93-2b33-94c5-7b93ea1d827d
 21 dcf33b03-406f-03f6-a5ab-5c1366393324
 22 53fb1e4d-abd6-82ae-a4e3-d95d2424f3e9
 23 ec629138-2dd4-45d2-86f2-972d5c7154f2
 24 c3234b8e-fb76-7402-b2c3-12f978e4bb36
 25 180870c1-0f81-2b45-8da5-4040d32459bd
 26 5e471511-bee9-89cc-a721-41f3c090f656
 27 ca7dd5de-34ba-86fe-8cdd-e20317ea5d8f
 28 46227487-607c-1ac3-95e2-3a2bc5a457be
 29 87874713-f746-2675-9b18-e50906d45884
 30 55c7efc2-de9c-5cdf-bfad-50dee021a91f
 31 1b8b24bb-b965-8691-b20f-3855acae114b
 32 036cbbb7-742c-6f51-ac24-9584dd35810e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 02455652570446105632084728812586. Exactly this sequence comes out of new Random(506).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 97 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs