A858DE45F56D9BC9 archive

201304032357 1bl52d

explained decrypted filler

seed 302

Metadata

Post ID
1bl52d
Title
201304032357 → 2013-04-03 23:57 on A858's clock
Posted (UTC)
2013-04-03 13:57:59
Timezone
UTC+10 · title 23:57 against posted 13:57 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304032357) = 6dbf26afdf5f770ca116fa9c5182b4de (name+title)
GUIDs
40
Filler GUID seed
new Random(302).Next(9) ✓ verified
Run
Run 44 (seed 1,087,967,875) (seed)
Draw
21 · predicted N = 40 ✓
Machine boot
2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304032357 (name+title). Key = MD5(password) = 6dbf26afdf5f770ca116fa9c5182b4de, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 8c26f95b-185b-4a92-a624-1c2d0c124561
  2 b5b541b9-8959-3c0f-954e-18ceb6662ee1
  3 7c9efcc1-6dbd-734d-94c2-538e64f37d27
  4 c2512f7c-b036-02c8-b18d-94f78a57c803
  5 408217b7-b8b3-4c75-bb3e-316e627ce302
  6 6d8e5029-8a4f-4940-8a63-f89059fa9fbc
  7 49324e0c-7b4e-109b-a538-ed33308c9717
  8 ffbe403e-08f5-81cf-a14a-bcfe5ef457a2
  9 ceebcc42-0f9c-3a47-afdd-c3bee423f0d0
 10 4ffb1782-04b0-516d-b7db-f15d8dd2b9b7
 11 a5f7703c-44ff-7780-85f3-1b0149acc9ed
 12 1d274e40-472b-2203-9126-9fc647eac748
 13 e077f61b-7d85-2b47-9720-b26bf3915a1f
 14 76809b75-b964-5a7c-9a69-b2f99274fc7f
 15 97bbfc3a-44d0-32a8-8550-117e1ebe0b83
 16 f226dc3f-8999-599a-acd4-882b95f89710
 17 8fccfcd9-575b-7f5d-9509-3961dc37e818
 18 e3c206c7-f33f-2469-a608-d7a02f513e9d
 19 205fbc19-bc05-727c-ac60-bbd61638044b
 20 0dae7756-5656-2170-b17b-b53bfaaa703e
 21 e4184e5c-c893-8a37-9349-8ec9a0dc69a6
 22 44f6b4ec-c386-8a42-88f4-ea9f907b07be
 23 e36e51de-f512-0ebd-bf16-3e4c95961889
 24 ea61776d-0c70-48a8-aff4-053b54c4eaaa
 25 35602987-9c40-2fa0-8353-8d0c382fd35a
 26 ae4e15ec-0144-69c5-93b9-6fdb88e9b410
 27 45600ec4-e393-5121-b75e-8ad25f73d4a8
 28 946c7e41-74ab-7727-b52a-50ee49b2d168
 29 39cc07dd-2cfb-8321-95c0-d380ea60f937
 30 a5e6eaaf-f579-2e58-8eb6-fd12e7543563
 31 0e82ede3-7179-636e-b28a-e3b79e355fa0
 32 bf0ffd51-e0af-07e7-811e-560ededa20bb
 33 0a6921c5-cb2c-6649-9cf8-1e690f367655
 34 e4931b8d-74e3-5f38-8129-71c8a7c7ac29
 35 5d7abf25-33b0-0ed2-a011-c89e91e7095e
 36 66db39d1-ca84-708b-8f4c-93ef283753b7
 37 274a6587-e9e7-15d6-8616-b76c67810f31
 38 212bcf44-a61c-164b-aaaa-e8daf3baa948
 39 4bb8ee46-9403-0390-82a7-b9f1680e49b8
 40 7db98350-7d85-3c55-9dab-d2e8200c8443

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4370441835722535727288042657826065071103. Exactly this sequence comes out of new Random(302).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 21 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs