A858DE45F56D9BC9 archive

201304031129 1bk37i

explained decrypted filler

seed 825

Metadata

Post ID
1bk37i
Title
201304031129 → 2013-04-03 11:29 on A858's clock
Posted (UTC)
2013-04-03 01:30:00
Timezone
UTC+10 · title 11:29 against posted 01:30 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304031129) = 5ef360ec887527398a9a42b4ec61965e (name+title)
GUIDs
32
Filler GUID seed
new Random(825).Next(9) ✓ verified
Run
Run 44 (seed 1,087,967,875) (seed)
Draw
4 · predicted N = 32 ✓
Machine boot
2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 2
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304031129 (name+title). Key = MD5(password) = 5ef360ec887527398a9a42b4ec61965e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0273371c-2bf9-6d2c-9843-4cfd3eddf66a
  2 121add24-5ead-77db-b78d-55f59d6a7f5a
  3 dca72a9c-6669-3396-af3d-263a76e105a4
  4 0652b0f4-8bf3-55b5-a025-980df82a8401
  5 985631a2-cc55-64f1-bf47-891d8f48a578
  6 8a832c97-ade2-4239-a0eb-45ffc88fa620
  7 94f8ee37-c960-4cf3-9383-2987c17e70ef
  8 0c7a87f6-7c5b-20ba-b033-e9e35edeff77
  9 c2fdcf78-e6e2-0292-a30a-e4ec7c1b925b
 10 73a83fb0-258a-4548-8e59-6ebfb3672d43
 11 003bedfc-902b-0e0a-81ab-87f9d1a1242c
 12 90b8e76c-ad8a-5719-917f-761f7f32743e
 13 4a91214a-76b5-73b8-837a-c5b32b27a293
 14 7faa90ca-d39e-6016-93df-5fe7f56ce00c
 15 33b1c1f1-dafe-438c-8895-c9fd5ae7e51f
 16 e20105f1-7b2b-2930-a86e-ffd6e80c2957
 17 f39ffc53-2275-5785-8b29-1f04b186035d
 18 61b72814-2079-4a54-9a20-4c206256679c
 19 12e61b36-e4b3-063e-abae-2dd0bf4f0f95
 20 ccee7757-ebf5-6e0e-a02c-784a62912690
 21 c9ed5d37-b780-35a9-9362-d520157c4ec7
 22 49821a9c-5cd9-25a9-9584-7358edfaefb1
 23 341783db-0e2b-3662-8396-50bdfe1407ea
 24 a5c7b3f9-8034-2742-ae35-40efd3847bd0
 25 e2c3ab87-0c32-474d-a625-4c9ced742060
 26 f9056daf-f25b-1bc3-80d8-4f0bd36782d2
 27 5092349a-925a-2b22-842e-84243462f14b
 28 c609a5df-0e2c-7a91-b171-28d682a5ea56
 29 afa5c86c-c68b-3cf1-91c9-b1cc61811c0d
 30 374705e4-dd4a-4446-9000-d84c064eadfe
 31 c3775e49-4807-64e3-948a-70b8af2f9df4
 32 638020d7-b281-6e85-9bbe-f63ea2c96965

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 67356442040576425406323241273466. Exactly this sequence comes out of new Random(825).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 4 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs