A858DE45F56D9BC9 archive

201304041649 1bnb5i

explained decrypted filler

seed 444

Metadata

Post ID
1bnb5i
Title
201304041649 → 2013-04-04 16:49 on A858's clock
Posted (UTC)
2013-04-04 06:49:59
Timezone
UTC+10 · title 16:49 against posted 06:49 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304041649) = c1dbbe0d6ea96606c25838639fbe8989 (name+title)
GUIDs
32
Filler GUID seed
new Random(444).Next(9) ✓ verified
Run
Run 44 (seed 1,087,967,875) (seed)
Draw
44 · predicted N = 32 ✓
Machine boot
2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304041649 (name+title). Key = MD5(password) = c1dbbe0d6ea96606c25838639fbe8989, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 902789da-9091-6f22-a89a-c30f9416d502
  2 f44aae32-a207-0860-8bf4-fb540ded9fe3
  3 318549fa-6b80-19c0-87cd-3bd42fde7b34
  4 3850bfe2-9f5e-2d08-9c51-ab1b3b0c4397
  5 304fc64a-e0c3-57e1-95da-0cb79651ea64
  6 883547a4-3d3f-50a3-a301-ee85774f0641
  7 5115466e-9caf-769a-a8c2-0e88dcd0d196
  8 bce20271-d686-112e-9aa1-b585c320907d
  9 f102a401-e518-850b-93c7-983b17426bae
 10 bc8a15f4-7e70-8195-a20f-3e14730a5eed
 11 06a483f2-1428-3b72-b745-47b75206e995
 12 e7267221-1462-0c13-a615-68d54053cea0
 13 5b5ce6cc-11d4-7737-9ee8-faf6787b4591
 14 3043b03a-4281-4e2a-9205-a56b8b113fd6
 15 788b1ac8-13f0-6758-8ca0-1be83735c6a9
 16 e27f1b7a-6d96-2618-bcde-3bc3677cefa0
 17 13f6c4f6-ceab-4848-8d5d-5d02236ee31b
 18 8afeb750-cb29-2ca5-96e4-04359f445a38
 19 46cf5a6d-6fa4-6623-81f2-51d3b834f5a0
 20 cbf5576a-836a-24ef-92c4-b7fa944c4f3f
 21 9bfdde4c-0cd2-7760-ae36-830bded30a06
 22 4a270e00-b7fa-6285-8b0d-f4a132e190b3
 23 b242005f-b5d0-01a7-bee5-e884a258c24c
 24 1970ebe7-be0b-1781-b25f-19d0d5a75f48
 25 3f4d3544-9bbb-1d50-88c9-8b77b33bb2d2
 26 aaaf224f-61dd-0082-bab3-be7560e17bdd
 27 7efdb52f-6bbc-645e-b041-fd83f87f4bd4
 28 fbfa7494-e21d-7913-ac89-f85839e9206b
 29 3c58237c-fc1c-1424-b4e4-666cfed70713
 30 ce5b3f35-303a-5532-9e94-8466950e56d1
 31 36eb1783-04dd-04aa-8c2a-50d2ff80d9c6
 32 93e547df-41af-3931-af05-2cfb415e61d2

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 60125571883074624262760110671503. Exactly this sequence comes out of new Random(444).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 44 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs