A858DE45F56D9BC9 archive

201304050729 1bot8y

explained decrypted filler

seed 713

Metadata

Post ID
1bot8y
Title
201304050729 → 2013-04-05 07:29 on A858's clock
Posted (UTC)
2013-04-04 21:29:58
Timezone
UTC+10 · title 07:29 against posted 21:29 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304050729) = 8f50b77a1421bd4c97b35997424eaada (name+title)
GUIDs
36
Filler GUID seed
new Random(713).Next(9) ✓ verified
Run
Run 44 (seed 1,087,967,875) (seed)
Draw
64 · predicted N = 36 ✓
Machine boot
2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304050729 (name+title). Key = MD5(password) = 8f50b77a1421bd4c97b35997424eaada, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 671bd333-0f66-1293-8ca9-d26d359d549d
  2 8e00f4e5-d9b3-0ba1-9bc6-b6e376254070
  3 1338feda-dc19-168e-bb4a-6c9f69810697
  4 432aad17-15b9-61ec-b14c-71d27de93a2b
  5 8a3d7821-cdfd-1d00-83a6-e98c4078ce67
  6 5dd524a3-6114-518b-bda6-078a5704fa9a
  7 e4d04c12-96f7-3638-a74a-c4abddaf1437
  8 ce86303a-0aee-1be1-92a5-da7ec4af24cb
  9 aa52e0ea-1fda-13cd-8e2a-c2955aae48c3
 10 5a031c57-73e5-1593-a03e-24de8d1ff745
 11 5aa24f17-edf9-5694-a616-f0e057804890
 12 ed134ea2-1c94-1e41-88b4-23c4648ac6c5
 13 0d371112-9bf1-7739-91f4-71abe7cb6683
 14 a5efac6f-b367-3038-9f76-46b8f6aa5115
 15 bb8f194c-1199-0f0d-91a1-021964a883d9
 16 7299efd6-9a2a-27f8-887f-2302222c3515
 17 47c72e93-fd3d-5340-9ffd-0563168b5519
 18 71343b7b-4593-07bc-af0f-c2c84896d86c
 19 a1e53006-0cb2-8717-bf9a-1a483a6b8ab4
 20 37a80fe9-49c8-3c75-bc27-520ca8b7f664
 21 e02355e9-65a4-4de1-b2f0-43ffe3ad30a7
 22 18421fa7-9871-6a1d-ae82-3f64a58144ad
 23 245bfb5e-6731-4176-8817-b2c546bbb047
 24 349ae1b6-8404-1141-b724-01bc7bef0cc6
 25 eb450d63-8536-55d0-9d06-34311b62c027
 26 45fb12b6-2bea-1c16-9c31-9c1821e818e4
 27 98b1dc4a-eb15-8394-8515-8890b454dce7
 28 1473e869-de53-4276-a784-0fdab3d8125f
 29 34475cce-e783-47b7-85fd-5de0d4d9eb1e
 30 84168b87-8b4a-2cb9-b634-25b87a8ecf18
 31 0231dc6e-68d2-3fcb-b302-b8e27de30f50
 32 e488ec1e-5a00-267b-b66f-9a0b1cd2cb1a
 33 6ff02ef7-374a-0bd8-b3c2-dadbc195ef43
 34 820331ef-779d-7cb4-87d3-44ed37b850ed
 35 ec2fe696-07c7-5784-89d3-4ccd45993e86
 36 1c9a1456-b033-592c-ad5f-306d60fe5feb

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 101615311151730250834641518442320755. Exactly this sequence comes out of new Random(713).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 64 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs