A858DE45F56D9BC9 archive

201304200955 1cqo5h

explained decrypted filler

seed 617

Metadata

Post ID
1cqo5h
Title
201304200955 → 2013-04-20 09:55 on A858's clock
Posted (UTC)
2013-04-20 13:55:49
Timezone
UTC−4 · title 09:55 against posted 13:55 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304200955) = fba3c619907ff8b346dc4a63fae2ad1b (name+title)
GUIDs
32
Filler GUID seed
new Random(617).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
53 · predicted N = 32 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 4
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304200955 (name+title). Key = MD5(password) = fba3c619907ff8b346dc4a63fae2ad1b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5063e1e0-c3a0-0486-81bb-751d5dfc78bb
  2 fcb142f2-c216-79a7-ba54-1a6e98e81d58
  3 d760a612-bc33-0f21-8e9b-1f276a93de90
  4 0b161790-a854-2a72-9267-b417b8f4c12d
  5 7b7a1e12-4eb9-6fc2-b584-7ed5aafa34ad
  6 2a8537fc-d088-60b9-a068-1692074a5ae4
  7 d62623c3-747e-3201-8fbd-5454f91f3180
  8 41c5e9cc-ff96-8fd8-8885-9b012f421ebb
  9 ef21cc8a-6e37-2aff-ad16-3bddfbbb8cd3
 10 b890d8e5-e4ed-7439-8a98-260a274d5c41
 11 f7553302-1d6c-7e1f-aff0-612150bbee9a
 12 212f20c3-bf21-1e73-948b-24b4f5b86615
 13 0cff8709-d25e-7e70-901f-ff83a3c5fba4
 14 5b5e2772-96b8-4f00-838b-7f7b862129a7
 15 a3d364bc-32b5-78f9-8f8c-10bdf535a284
 16 e696f378-d9dc-3f0a-a0b1-03286c955bec
 17 a6c0fd7a-d085-20cf-b4e4-f3d4fa39b5fc
 18 6fe889e7-c05b-4044-a5e0-82cd9c6171cf
 19 79493b2d-d77c-326c-b0e8-1a3619643067
 20 9d1185af-0baf-1810-8c68-a95a5b1ce5c9
 21 cbe2b0f8-a68d-79bb-bb2a-62fbc7648f84
 22 84c116a7-aff5-11b2-b32f-c2c390a37d2d
 23 9bae1c59-a4af-2daa-a4e9-6ebddee56f26
 24 cfa491ab-e115-502f-b92a-71a1ca712938
 25 300d11e7-c9e3-1525-9747-2d42d9fdb78c
 26 5b6e1c36-62e7-3b28-847c-8a750fd7363b
 27 cd26fc4d-8b1b-3cbc-9d5e-3e122ad51bcd
 28 d9274d19-865a-8b19-8f94-9e6c2fdcaec8
 29 5db77809-998e-8fb0-a47e-523d6396afe9
 30 debd2dac-f1e9-845a-b695-03efd6ae2066
 31 b318b468-8824-8f9f-83c8-315754be08fc
 32 ffdb39a1-d5a7-8c27-909f-d18d30bd7f8a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 07026638277174732431712513388888. Exactly this sequence comes out of new Random(617).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 53 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs