A858DE45F56D9BC9 archive

201305161621 1efv2k

explained decrypted filler

seed 535

Metadata

Post ID
1efv2k
Title
201305161621 → 2013-05-16 16:21 on A858's clock
Posted (UTC)
2013-05-16 08:21:59
Timezone
UTC+8 · title 16:21 against posted 08:21 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201305161621) = a7b4a24f5a4ff835cc91ff2d7f45bb58 (name+title)
GUIDs
40
Filler GUID seed
new Random(535).Next(9) ✓ verified
Run
Run 46 (seed 39,043,781) (seed)
Draw
16 · predicted N = 40 ✓
Machine boot
2013-05-15 03:07–10:31 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201305161621 (name+title). Key = MD5(password) = a7b4a24f5a4ff835cc91ff2d7f45bb58, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 cb197f0e-495b-271a-99a4-9596d1ba08fd
  2 f4317ae8-8a9a-7b08-90b0-8a460943364b
  3 c5330c81-7502-6e8c-a6a8-d8fee456269b
  4 38a23ad3-6a8f-6a3a-90eb-a3fd18c815f6
  5 db274d66-74af-600c-9972-652a9d2915b1
  6 4d070fcb-1c0b-0e8e-b4d8-c8517a8560cf
  7 aad23977-a5bc-585b-b692-cdf518af4633
  8 0b7d91ed-b021-7c5c-b4d1-edd3ec3f1536
  9 b76550fb-7854-1ded-b3bd-d9829bfb50bd
 10 338a8b9d-b243-4a7b-8b4f-2a99e2172437
 11 311c85cb-4877-3f02-99ed-482e2c4ff002
 12 2efa8b25-783f-162a-a789-c1551b172daf
 13 06e41e25-62a1-32fc-9e76-0ff8b45e0f93
 14 18108924-01d2-7154-8584-6b1b154444fe
 15 0847f154-093b-4a50-84ed-cea065c47555
 16 24c55958-ec0d-199f-9fd5-1e9acb8ee2ff
 17 f34f561b-a98c-65ab-91cb-bcfa27e17a62
 18 973f64b3-d898-64f3-b5d6-32b693a377a2
 19 a5214254-2b63-1d40-8a77-c3dbcd28115d
 20 10138f70-663b-4529-9f08-e6b71a9088cf
 21 0c0c8392-3963-8a4e-ad7b-d7196c4caa27
 22 f0afd311-5872-0da4-884c-f5bb2ad0cc3e
 23 6858a6a4-bab5-3f4f-a086-75c342c1c756
 24 ea971e08-4e19-8024-936a-f6b0eb04d825
 25 ce9ae980-8a21-1fca-8051-1a66aec5d359
 26 e7c0546d-f19f-5975-8680-32c8a55ce99b
 27 24d8c987-365e-884a-a584-ae221e41ca6a
 28 66635f4a-60e2-1b96-9440-e890edb2a348
 29 a3132229-1826-2bee-8ee1-d38581f1d1c6
 30 8f88bc3b-806c-8395-858f-6b71927da7ab
 31 67c0fd17-69fd-6c71-8968-680518fc7756
 32 f7b3a0f1-c6cc-389a-aef3-27086f7857eb
 33 b5630d5e-2b9e-314c-a9b4-5264ee59e0da
 34 62fd5aef-4c7e-37b3-8da0-4ad76e37c333
 35 703a081f-8a6d-478d-b94c-dbc854bbb051
 36 d3a59d12-62c8-82a8-a14d-f6efc34dce4f
 37 ba79a5b7-01ca-1727-95af-70667e58fb8d
 38 51fe2923-d405-8e00-8ea9-4c98a4fde687
 39 b5380432-7735-8de7-a98b-65bcff7b753a
 40 1db7d945-4f44-6900-bf83-84807dd080a1

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2766605714313741661480381581286333481886. Exactly this sequence comes out of new Random(535).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 16 of Run 46 (seed 39,043,781): new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs