A858DE45F56D9BC9 archive

201305161113 1efgai

explained decrypted filler

seed 875

Metadata

Post ID
1efgai
Title
201305161113 → 2013-05-16 11:13 on A858's clock
Posted (UTC)
2013-05-16 03:14:00
Timezone
UTC+8 · title 11:13 against posted 03:14 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201305161113) = 4ba3ae8ad16419fd160ff05d3ab9c13a (name+title)
GUIDs
40
Filler GUID seed
new Random(875).Next(9) ✓ verified
Run
Run 46 (seed 39,043,781) (seed)
Draw
9 · predicted N = 40 ✓
Machine boot
2013-05-15 03:07–10:31 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201305161113 (name+title). Key = MD5(password) = 4ba3ae8ad16419fd160ff05d3ab9c13a, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 899dd7c1-5b1c-71a6-8465-11726263d7d2
  2 9c2c1778-1e81-5ebd-b12d-41804055d7ca
  3 0edc1b5c-e25d-3abc-a25f-ddb8c66b62ed
  4 7f2c50e4-75e9-2389-93ed-d22d181debab
  5 c7d3eff6-a7cc-20d8-839c-fdcd61ecebc3
  6 3ecec5cf-a1a0-10dd-b361-922f7d31e83b
  7 6e6c5035-a7fe-85f6-bae3-333d19958415
  8 c9b28468-c38e-3a98-b714-81cb010678e2
  9 9af23a3d-ecdf-2ed0-909c-7db7d4060d0d
 10 406450d5-5cd2-8b00-8714-92968d8fe2db
 11 f41b5541-e15b-82af-91e3-e65a7064478f
 12 bf33a1b6-e6ff-50a0-b982-defc57776e8b
 13 410aaef6-4934-1fbf-a85f-28d4998b0ea3
 14 25f9973c-cc7f-6b18-aa1f-7e4e685c4317
 15 6b239386-d8e1-4b87-95a1-2e298d629414
 16 d76966c2-7489-4c68-9619-0bd008666913
 17 bab09a4a-7a62-6f7f-b220-eb45e16a5fce
 18 f1da9b6c-bfaf-4001-9dd7-3adf82a2c99b
 19 c6ef008d-ad06-3e3d-8a88-103e0a57c793
 20 455d828d-3e43-12dd-b333-09212187bc40
 21 293bdc73-68bc-04a4-a44d-78dd5750aae7
 22 ed15cdb8-f929-4ba2-ad63-3d17223b65dc
 23 dd493038-20c9-707e-9885-277007fc8663
 24 65f601eb-3b88-6623-afa8-2f100275f39b
 25 b6c06d39-aac9-445b-8983-fb27ed098325
 26 9c67dea3-3295-2e8e-8f32-68cd87ea1977
 27 74eb60b9-0ab0-22c6-8006-bda7a1c091dd
 28 df63c7d5-18b9-7964-aaad-0fef3227499d
 29 f89394ef-5a78-266a-9915-56214db86996
 30 43c5b762-c5e8-6fcd-bcb4-0c16754c281d
 31 69266dab-5214-135b-808e-ff8a6e5a5817
 32 c11492a1-87f7-80cb-9e60-9c1cf8f1afef
 33 578ad537-8c22-14a3-8853-e1d809f64ba0
 34 73715c4e-8237-85b0-87ba-0c082b3c4ce8
 35 8eaaf2f7-da6e-151a-b59c-4d76a518f1b7
 36 b0809f19-3385-6a75-94ab-49252e9b8f19
 37 e71b56de-8fe3-7584-b239-9905f71f8183
 38 84451c21-0eca-6a62-a224-9db77f2b1801
 39 6b30123d-05c0-1beb-a349-9ee2ab248955
 40 0c8afa85-2151-7d37-aa14-3d78612db910

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7532218328851644643104764227261818167617. Exactly this sequence comes out of new Random(875).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 9 of Run 46 (seed 39,043,781): new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs