A858DE45F56D9BC9 archive

201305141600 1ec2zo

explained decrypted filler

seed 74

Metadata

Post ID
1ec2zo
Title
201305141600 → 2013-05-14 16:00 on A858's clock
Posted (UTC)
2013-05-14 20:00:01
Timezone
UTC−4 · title 16:00 against posted 20:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
32
Filler GUID seed
new Random(74).Next(9) ✓ verified
Run
1ec2zo (short)
Draw
1 (assumed: numbered from the first post)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
11 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: namerun: short

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 f5c8985c-0ead-3bc6-b9c5-e7c21f068e98
  2 38eb1519-41f2-4f13-8ff9-4c389e114d2d
  3 f8a123e1-ec4a-44d1-996f-f9cdba276f2d
  4 3f46711c-c5fe-3cd2-a1e0-193fc63c1745
  5 fc83e627-78c7-5c77-a9d5-9f2009a9db41
  6 d3dc976b-3ebc-24ab-b12f-b58b698ee07c
  7 a6a883d1-336c-0371-9c47-79f78df42e29
  8 831556f9-43f8-53a7-838b-2e6a9454c7e0
  9 3bec5dbd-59e6-1c75-b09f-eafc575ef0a9
 10 31868154-bdf8-5db0-a5fa-cfbf380cc8c1
 11 f047e4fc-e1fc-7072-849a-7f02b31366c7
 12 5203ff5c-5942-257a-8425-945e0a9c359d
 13 b61e1dcb-4b15-497a-a30c-746a7eb4b450
 14 b28f88ae-2eb6-8fc3-9ffc-cb9496a6d9ac
 15 0cef7669-e226-7123-8e08-88762ba897c6
 16 b532ead4-3eb0-225e-9557-f654b5bfd7b6
 17 bc99097d-0812-8b37-9923-009978564623
 18 857f3292-516b-744d-a409-779dd04089f0
 19 6de4a87b-ed0c-69dd-96a4-03e3ecd7ed48
 20 ea5bef6f-ebf7-8346-b12e-297bac77c25f
 21 3dc3f3bb-b770-5d62-80a1-71e35d81aa33
 22 782a03f9-4f81-0e90-995a-d3a71d950e78
 23 c5c5f5d1-f3ec-4f54-8dc3-25c946fe48da
 24 1d6df2e6-7b6c-7134-8920-477489c9634b
 25 72547bf6-c888-8f19-9ef4-9dd54e5cd078
 26 22477981-ad66-1533-9e9e-50c926f6bc3e
 27 75611c95-d8a3-5aea-a940-7b322c01a24c
 28 7eb525f9-b1c6-4d4e-8a62-0f604ab98f23
 29 85fa8b8e-9df5-8009-90ff-dc351f9e49c1
 30 7744fa38-fa6f-63d5-8999-478e78c4e9c6
 31 b5633bc2-3771-4007-bf2b-b2a874bf54a4
 32 d6073347-52b2-8cde-8f2d-26dba64ccee2

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 34435205157248728768504781548648. Exactly this sequence comes out of new Random(74).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. Grouped in 1ec2zo: range-8 piece (5 posts, 15 bits): undecidable even with an exact boot
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs