A858DE45F56D9BC9 archive

201304051449 1bpr1x

explained decrypted filler

seed 334

Metadata

Post ID
1bpr1x
Title
201304051449 → 2013-04-05 14:49 on A858's clock
Posted (UTC)
2013-04-05 04:49:57
Timezone
UTC+10 · title 14:49 against posted 04:49 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304051449) = 2fc84f53ddffe75fea91d9defd7c606e (name+title)
GUIDs
40
Filler GUID seed
new Random(334).Next(9) ✓ verified
Run
Run 44 (seed 1,087,967,875) (seed)
Draw
74 · predicted N = 40 ✓
Machine boot
2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304051449 (name+title). Key = MD5(password) = 2fc84f53ddffe75fea91d9defd7c606e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 8f189282-6135-1dcb-990a-bd8ab3745ad9
  2 f4ec4431-65e9-7bfe-9214-c66c81beea4c
  3 ad24ba5d-7f15-2d41-bf65-5624f51dec54
  4 1c2fabe3-e8be-7cc8-ae64-40ecc33cdfed
  5 2523c279-cf29-090d-8ab1-6282e270517a
  6 4dae9b75-5128-3203-98f6-c00b88b8ad22
  7 f327dce2-b664-559f-993b-cbec28a17161
  8 3dc92160-691e-0ea0-a85e-71f2ed5db5a0
  9 2451846e-98e8-2339-96fd-9d4e3b19a50d
 10 841a142a-e25e-3248-a111-206f246aa2c4
 11 868e1632-a64b-3634-af33-9e2a2c76c1f1
 12 4e372ad0-5c84-2eb3-acd4-8f8ed37f8023
 13 eae8c45e-078b-2633-b092-4ec36b5a23f0
 14 ae798655-4d65-2c7d-8666-a2cd549a3912
 15 a0badb97-1d96-6681-80ea-18e5e743015f
 16 9ab1cf5c-474c-51bb-b837-fdf2f8301994
 17 56a08017-9dd0-2f2d-9fd3-000d6384680c
 18 bfa279b5-c956-04da-8bbf-295ee89e99c4
 19 f23d357c-55b3-6c35-804c-db72d11ab6b8
 20 65225710-ddc7-5a9f-a2a9-1efac0ca4963
 21 9a13e90c-50ac-17a1-aa50-92bda08b3fa4
 22 2f8a41a2-7965-7a23-9312-198e59c6a7b6
 23 002e02e3-7d86-3d41-a838-1ffa08ddb727
 24 db3ee3a9-acf1-6e27-a070-f984a217fe53
 25 c9543902-f9d6-39c1-8c7b-bf96c5785e08
 26 f7c8251f-6b69-3bdd-b5c0-86a57d999780
 27 d3bc1b55-6bcd-0c80-9874-1da6dd44d668
 28 f0be6b74-fece-5da5-b40e-bc45ffc5ce1f
 29 63f8a347-fd67-7bc9-b87e-2cc1c0b70a9d
 30 742749e2-ec4e-0c8d-89d3-49a304aca4b4
 31 a6880f1a-d9bc-4f95-8ca1-e0ba8ff2c167
 32 a5445e58-791a-344d-a20b-598fb26c3797
 33 6fbc696b-9375-5c0b-a703-84e461e688e1
 34 ff6aaf84-d533-3c1e-b138-0e488818b445
 35 cc875441-229a-22cc-9096-a369957130cb
 36 8dee197b-b547-2e63-acfb-b344182e9fdc
 37 a54f6204-3bb6-60ad-b9fe-202692dbac15
 38 b06ae7e3-4d9b-03da-b0fc-67bf537a5139
 39 a107a667-5cf3-44dd-a0ec-7532fb7c8dfb
 40 604753ab-c980-5c23-a994-5047ee42bfda

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1727035023322265206517363305704353226045. Exactly this sequence comes out of new Random(334).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 74 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs