A858DE45F56D9BC9 archive

201305010850 1dg842

explained decrypted filler

seed 549

Metadata

Post ID
1dg842
Title
201305010850 → 2013-05-01 08:50 on A858's clock
Posted (UTC)
2013-05-01 00:50:36
Timezone
UTC+8 · title 08:50 against posted 00:50 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
40
Filler GUID seed
new Random(549).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
116 · predicted N = 40 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 27438d01-ff06-4ee6-a115-7da0d0dfe2d1
  2 da0720b3-87be-8c23-9278-76665b3bb2a3
  3 44568f86-7217-4630-8308-9c14bd7e72bc
  4 ba0e75e9-2f74-6d01-9a75-7aedd11a1b4c
  5 8a9d562c-dbe8-051f-b7bc-507336f5a784
  6 321fd9b1-74ff-2893-9d13-b675eae64e33
  7 203d9efd-ee50-81c1-ba93-720169caf314
  8 7214fc4f-e3c2-764b-8bf5-5c2cab8422e4
  9 43c097ab-24ea-8daf-9229-a6462fa35e93
 10 532b0477-fcbb-698b-afad-780f9a7785c1
 11 c50f2233-4ca2-6137-b58d-49fb70bd843e
 12 0c14441e-9f26-09ed-8cf4-041c1a377e31
 13 a34576a4-4235-01f4-a403-faaa644d2b57
 14 323caadd-a922-068c-9e9a-a5d5e51d0732
 15 e48c50d1-f55b-2699-8ac9-1237dc5f3bd3
 16 e82a4f0b-c1e7-8568-81d3-0a107d879971
 17 f280189d-3975-5551-b861-d605e3b74af3
 18 35fe9b76-9b29-3792-ba12-36b3bb0d0ce8
 19 a194239e-d23e-44d2-998a-eb231c3f0c83
 20 f6e34683-c035-8d5e-8db5-960da933ab8d
 21 d9a1a055-e77e-60db-85e0-233255369736
 22 d8fb2dfe-566a-41ec-bdc1-a103783b0c11
 23 47b692a9-b666-65c4-b74c-25b1e06f61ae
 24 cb060c05-52cd-744d-a46e-6c29a0f392c5
 25 eb7ed3eb-7b27-4c23-871f-e784d4500fa5
 26 32bd18b0-7562-5a78-91be-0ecd32c6f073
 27 ef8fa1e6-f14e-82c1-870e-7a4e16cf603f
 28 ef74d03d-444f-72d0-acdb-8459e262c0f8
 29 42e99fe0-1b3a-1bea-8dff-08c537d4af11
 30 a3b63d11-5151-2605-964d-7ff770f492be
 31 3d53c4e9-2860-716a-9f40-6c6286b5cd98
 32 4e93bcc4-b554-0d80-baf7-9d1ca08fb3a1
 33 5d7c3832-6106-0db4-925d-200ba652acd7
 34 0205ea66-160d-66ea-b048-a8613017381f
 35 a2d2e847-c0a1-36d4-aaef-7f8f7e9c46a8
 36 803bc7e0-86a6-4644-9425-20f4ccd1963e
 37 7a261003-a8be-780c-ae11-3bf89550cce7
 38 946a5c3a-f851-4eef-aa41-2214a634755b
 39 f90d6a93-3cbd-31ac-8b02-d4cb3f2b6cdb
 40 4e0373d1-2f40-6828-abcb-cfaed2eeeadb

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4846028786600028534864674587127006347436. Exactly this sequence comes out of new Random(549).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 116 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs