A858DE45F56D9BC9 archive

201304170415 1cisj2

explained decrypted filler

seed 757

Metadata

Post ID
1cisj2
Title
201304170415 → 2013-04-17 04:15 on A858's clock
Posted (UTC)
2013-04-17 08:15:53
Timezone
UTC−4 · title 04:15 against posted 08:15 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304170415) = 88533de49fdcf036679b1a83b4e651a0 (name+title)
GUIDs
32
Filler GUID seed
new Random(757).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
33 · predicted N = 32 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304170415 (name+title). Key = MD5(password) = 88533de49fdcf036679b1a83b4e651a0, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 cbe77247-f2ae-1953-85c6-3cf32981d73f
  2 f14d8e1f-0f48-8118-9cb4-c223c533e7ba
  3 a798621b-18bb-8f94-9151-c87151ef4bad
  4 19d6eb7e-0304-1c8a-a82c-d5d5462c1f20
  5 fe893ab6-f8a5-8bc2-9d01-3a052a40e296
  6 a88de779-a944-0bd4-b9c4-62dd44c460ea
  7 911787b5-4043-07f6-b0c6-db062a665210
  8 9f3ad217-9ccf-10f7-8dab-3ed07e6e7331
  9 db14bc11-eec0-53fe-8674-b27a8067f36b
 10 1b1b2913-b706-3ed0-8e64-cd3badf4d4ff
 11 2f486134-9ab0-8464-8006-e85f05c97e6b
 12 a261a1ce-578a-4d88-b756-b6c423da82d8
 13 26f2d2cc-c41a-0262-9964-2bf43c1275a0
 14 f3581e05-d6d6-2e74-99cc-874e0c43a419
 15 61b49979-c33b-7e4c-bf93-4212960b15bf
 16 25f4b841-62aa-70bc-8f2e-ea14d86d78a1
 17 0a91d997-dd5b-0343-a22d-f2cabd9b4a6e
 18 5985e364-ecfd-378f-b722-233751a3f782
 19 a707e6d1-6d42-19a9-9e4c-55e8917c749f
 20 178977ba-c662-39c3-ac47-62fa1b93243b
 21 a94f2533-19f9-3727-a242-084dac9e8a40
 22 d06a1b9d-59ab-52b5-a592-400070233108
 23 a3936db4-804e-8e33-abdd-6734980bcc88
 24 673b029c-a7e4-4419-aa6c-11be1e0a8fdc
 25 bb111f7f-4bcd-830c-b16a-e2d40d8e9222
 26 19b23174-1b4a-3be7-a40f-4f83c7e9abd1
 27 7610374c-83b3-6be9-81c0-544963296890
 28 4a4fd779-1ef1-6e38-9637-4744b8c9d608
 29 31fa2e01-4746-5e13-8d9a-7224f53e3a7d
 30 4024a959-2fa9-6d42-b000-94a78072cf96
 31 4e8bf3d5-de08-5d7e-8881-5c902170a2a7
 32 87a1424f-c40f-77a4-886c-de0fc6d9fa08

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 18818001538402770313358483665657. Exactly this sequence comes out of new Random(757).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 33 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs