A858DE45F56D9BC9 archive

201304141800 1cclat

explained decrypted filler

seed 947

Metadata

Post ID
1cclat
Title
201304141800 → 2013-04-14 18:00 on A858's clock
Posted (UTC)
2013-04-14 22:00:56
Timezone
UTC−4 · title 18:00 against posted 22:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304141800) = 63aadf737a382ad8af307422f22ddc51 (name+title)
GUIDs
40
Filler GUID seed
new Random(947).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
18 · predicted N = 40 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
7 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304141800 (name+title). Key = MD5(password) = 63aadf737a382ad8af307422f22ddc51, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c89b4a7a-7429-4158-abf0-84d6cb37d9f8
  2 de8581fa-2017-6277-8e44-428ae6b50c43
  3 5a3f4c48-c718-61ac-9470-a1ef7d4a4e5b
  4 d9c311a5-ce52-6f0c-bbc7-bbf1765e601f
  5 870b6120-a23f-6c46-a380-9a1356ac3b1f
  6 7f5811a1-6374-1cbd-a6e3-9e685d1a8989
  7 e4c08c7e-d50a-1df9-93c1-c3258e1078b7
  8 c68d9f64-8092-45f0-9412-b2ac1332584f
  9 70481b24-95e5-16e9-8bc1-2ddc98907bad
 10 61402df8-85ce-4920-afd8-1cc32bce4497
 11 9bfbd176-88e7-829f-b744-eebc039c4882
 12 831f588b-cb67-7bcc-b77b-f724d0f99e8f
 13 c47d2d73-997f-59ed-816e-0fa0dd43a2fd
 14 e2aca0e9-302c-15ae-b5c6-267f68b23ef1
 15 35624272-38a9-7eb0-9a05-4b001a284705
 16 1f76c2ba-58cf-4a12-90f2-6b4881a00a1b
 17 adaefb14-483e-83e0-9514-f44f1e886050
 18 878dfacf-5e44-1698-9407-b961d6376865
 19 293fa655-22b5-21d5-8e8c-2db6e30ac279
 20 d7dace61-2337-84e0-9adf-ea3affe15c5d
 21 5b3045f1-d4f8-5993-92e6-50b66e3b6a23
 22 5f6fc0e3-0130-1eeb-9aa0-dfeb30a733c2
 23 5ba8c936-ad8c-0f45-a42b-c18b69fb80cf
 24 0d8fc368-874f-7f1e-9223-6a3d1be4b7ae
 25 5d16ae32-e763-45f9-bd54-fe404f34220f
 26 e73055ee-1579-5a4a-843a-fdf408242015
 27 231ab68e-242f-1167-b5e1-0acec1145d34
 28 d909c263-1762-4c94-a910-5ee86d634efd
 29 8e8ef176-e335-1f5a-bc5f-fc8b7b680fe2
 30 1e405f60-3027-6126-a97b-35966fec9ab1
 31 f45234f8-c90b-7de6-ac37-7eb10e9185ee
 32 2508a57c-4c7d-85cc-b581-f8c52c63a6a2
 33 45d085bf-3876-0d3b-bb6e-310ae7f3bf33
 34 7befe1f1-7c82-6514-b4a4-ae0df628ebbf
 35 755d42c8-099f-2297-8c32-77cb212ab9c8
 36 d9ac704d-eb19-735a-ba0e-c38a72747e69
 37 1084e49d-0ce9-44ca-b739-f067cccc7c61
 38 26546290-bbf9-64cf-8108-b99523c397ed
 39 e39e36c1-fdf1-4925-81cd-c479ca7e2fe8
 40 b0cdde8c-2350-6d79-bd35-60c88f042e4b

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4666611414875174812851074514167806274646. Exactly this sequence comes out of new Random(947).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 18 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs