A858DE45F56D9BC9 archive

201304060529 1br40f

explained decrypted filler

seed 500

Metadata

Post ID
1br40f
Title
201304060529 → 2013-04-06 05:29 on A858's clock
Posted (UTC)
2013-04-05 19:29:57
Timezone
UTC+10 · title 05:29 against posted 19:29 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304060529) = c43ffce081fad9d47408b44d1b83a0b2 (name+title)
GUIDs
32
Filler GUID seed
new Random(500).Next(9) ✓ verified
Run
Run 44 (seed 1,087,967,875) (seed)
Draw
94 · predicted N = 32 ✓
Machine boot
2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
10 · 10
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304060529 (name+title). Key = MD5(password) = c43ffce081fad9d47408b44d1b83a0b2, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 cb25f493-9a0d-8a4e-8088-995d63f25b57
  2 0293bf9e-45e0-482a-a063-438108476241
  3 c07e2a06-5252-26f7-adc9-84522b746566
  4 4ed77669-53f8-2ec1-8e5e-b865fab76ddd
  5 70e5a65a-abb9-800c-a6bf-d2114fe1eb45
  6 4d06f32d-bf4e-4253-a459-d246b84a11bb
  7 c7c97999-fee2-801b-9dcb-cfb3a381f28d
  8 08ed3d3c-8bd6-2d0e-9731-0f6f28506fed
  9 89bc458a-8509-7111-b2c4-59578786e0a0
 10 d3d72997-40d8-5923-ada6-ed80a7391c63
 11 feb626da-ea6d-5e35-9ffe-7fb41ff9e26d
 12 0540500e-c303-7028-b73b-d9d7b9cfeda7
 13 8f919ebe-c201-3d9a-8164-16807964b290
 14 f2762993-ec3c-5a44-8009-033d49d3d9e0
 15 8f0ab957-594d-80ba-88f0-54cc82dd55e7
 16 6157829a-5b15-2f72-9502-95a409682e70
 17 ffbc4c6d-d924-05c3-9c52-d08eca07859f
 18 f60f301e-f994-8f71-a9ae-6366f2cf65d9
 19 d6f68a8c-e72a-1993-9661-c1d234d2a644
 20 d54411cf-42cc-8a6b-a8f0-985569cd6a3b
 21 c55591f2-175b-21db-881b-0b8a62da0d5b
 22 112b0b47-f652-4a95-ab67-d1dc09796c4e
 23 35e9d2d7-ac99-4801-bb6f-d623c7b3a3a0
 24 486ca23f-294a-6ca4-81cd-443970d2ce43
 25 7c67678b-6f93-6214-943b-4bdbce3f3fb5
 26 26e044ff-2326-1341-9ef5-69cdbbfadc43
 27 5ebb87b6-9bdc-7c89-b195-c31a95ee4a6f
 28 d425d841-e2d9-40ec-b0f5-248e2a7c439b
 29 05bc8baf-9685-564c-9456-1dab4a10d8c2
 30 fe93b364-7622-661e-9f1e-33a63b2ebdee
 31 ef39d803-4ffc-6d4b-9929-d9e67df17705
 32 4314cebf-44ad-1be8-a415-a64b4f0e7ea3

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 84228482755735820818244661745661. Exactly this sequence comes out of new Random(500).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 94 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs