A858DE45F56D9BC9 archive

201304052253 1bqa2u

explained decrypted filler

seed 853

Metadata

Post ID
1bqa2u
Title
201304052253 → 2013-04-05 22:53 on A858's clock
Posted (UTC)
2013-04-05 12:53:57
Timezone
UTC+10 · title 22:53 against posted 12:53 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304052253) = f6c798dc4c923442f0341a17ec04c33c (name+title)
GUIDs
36
Filler GUID seed
new Random(853).Next(9) ✓ verified
Run
Run 44 (seed 1,087,967,875) (seed)
Draw
85 · predicted N = 36 ✓
Machine boot
2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304052253 (name+title). Key = MD5(password) = f6c798dc4c923442f0341a17ec04c33c, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 fcf937e3-a42b-3bc1-8eac-31b4180c949a
  2 bde33dd8-4170-084d-9f24-4918695b14cf
  3 30aa9dda-eace-01d7-9a8b-c43037899e9e
  4 30e73b82-5a91-5507-8214-bb1b638e25c1
  5 1ea16bf0-20ee-290b-8a46-251bf53a13ca
  6 3b7c8f70-7426-870b-9cc8-b814bfdd9853
  7 9c8d4beb-1336-08aa-be40-0e709c155445
  8 e9107a7c-310c-34ee-982b-821cef541eb5
  9 7d3d93d2-048c-4aee-8bcf-798144be527f
 10 66e3acaa-a9bc-7e5e-bddd-8d286909dd67
 11 05b7244e-1239-66ea-9ff9-215e663d00fa
 12 8815710f-f823-39ad-b141-bc46a21293a6
 13 0dfd5d70-758a-0c3a-9b4f-0177418b7c93
 14 38727241-5bf7-29e3-be3b-4c0526db3556
 15 c1a78bb6-a3da-0b62-a83b-870f0d213e03
 16 46eea340-f9e8-6abf-8fef-7afe49e1f7e9
 17 e2be0668-ba53-3eae-bfb9-3f201d0cdb2e
 18 16bb9d31-2598-7d9e-95c3-02d2d0ce597d
 19 a1814d5a-b051-681a-b90e-23809d5956db
 20 d59f0295-2aef-56eb-8138-a21094adb5ef
 21 2b24f99c-e74b-1a1d-8a00-dcb1ad2184dc
 22 c4e0bbd0-7f8b-1bb4-8898-9561198769ee
 23 1c71ce08-a8d8-1b32-b6a7-530e2ea66aae
 24 1cfe3d74-dccf-0095-8edd-5d89719d2d0f
 25 249abce1-a4d4-28c6-8072-2be39bb0a074
 26 3d9a60e2-5b16-1d46-9ffc-ade6a19c86f1
 27 1ca90862-3fb4-2912-ab7b-2573a6958746
 28 a9695dd5-3527-1846-a50b-164e60afdd79
 29 aedebfe3-6281-1813-b819-21c7e932bd25
 30 a3cdcea5-df7c-00f5-a974-f47261b106a2
 31 c824ba1a-e7ac-00c9-9c8c-16376616bb66
 32 53086690-6fe9-1125-9992-acc53d7d4f19
 33 e870870a-c84b-2845-ba24-e2a94ec0f3e6
 34 18e43e0e-2c53-326c-98d4-6b382861d8b7
 35 d9f59cb6-8279-40af-86d5-35c99ec7601c
 36 f5273003-b82f-67c6-a83a-9206dc8c41ee

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 300528034763020637651110212110012346. Exactly this sequence comes out of new Random(853).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 85 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs