A858DE45F56D9BC9 archive

201305162129 1eg6dw

explained decrypted filler

seed 288

Metadata

Post ID
1eg6dw
Title
201305162129 → 2013-05-16 21:29 on A858's clock
Posted (UTC)
2013-05-16 13:29:59
Timezone
UTC+8 · title 21:29 against posted 13:29 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201305162129) = b1f934f1056cd7143b3ff2349351bb17 (name+title)
GUIDs
32
Filler GUID seed
new Random(288).Next(9) ✓ verified
Run
Run 46 (seed 39,043,781) (seed)
Draw
23 · predicted N = 32 ✓
Machine boot
2013-05-15 03:07–10:31 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
8 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201305162129 (name+title). Key = MD5(password) = b1f934f1056cd7143b3ff2349351bb17, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e2a96235-06a4-1f2b-9614-b1dd63e027c8
  2 7412ba8e-ba77-21cd-9785-fd28a1664f92
  3 5f704b79-eccd-0698-845a-5787f5236e42
  4 15e4c9ce-573d-080c-8000-2bb3553d0e60
  5 6d9b36f5-975b-2fb2-ae72-d781dc82daa5
  6 52f4f200-74b0-2aa9-88ef-d8aebaf5e3ac
  7 bcada9e9-e5cf-82e8-8e3b-f3d8157defd9
  8 161eb642-c923-87fe-83d6-f0967efe9966
  9 56b3d219-434c-5831-bb50-13e803da7cdc
 10 86b4babd-70dd-4e12-820b-984faba46eca
 11 ff9c9672-23ec-41b1-b237-ba07fb9e7938
 12 c4b835c9-6224-280d-9e1b-16ddfa573135
 13 1753d1b9-64e5-5917-837f-32775913a5a4
 14 e6da1419-0383-2005-a9c6-f832a4bc642e
 15 2b220bd2-0017-5289-b2ad-71c66c376b2f
 16 c4e4a2d0-258b-89e2-ac34-e36767d3652b
 17 1ac8ed68-2753-8653-a099-98956229a4cf
 18 02b7c270-5d3d-4298-a571-876454675eff
 19 dece79ef-187b-4f31-8341-0656a3ea30d7
 20 0c140bcf-83ff-71b4-8c91-d3ffb038b1d1
 21 897cddf9-40a7-0f45-a7fe-48052c60ada7
 22 a443e607-906c-4ce7-b3c8-dff52c8e2830
 23 94ea0308-c33b-5bec-b3a4-89e5a98239e1
 24 f52d5b41-6460-5504-bdaa-7df21302f9fe
 25 a3fc08f4-496f-801f-afe4-ad4b486b11cf
 26 e4ce5fc3-7365-6c4c-94ef-6211ccaee09b
 27 1651eafe-e530-4743-a2e1-6274adb5af5d
 28 4835f794-a674-1666-9448-22cfe4645393
 29 cbaf0b49-2e3a-0d24-b5a3-34ec07ea17cd
 30 2260f8b3-6200-0eef-b4fd-e2fe722cf11d
 31 d79367ac-5062-479a-a40f-a64c605f4126
 32 2ca3a8f3-e27b-2544-9284-490f72d86ef9

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 12002288544252588447045586410042. Exactly this sequence comes out of new Random(288).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 23 of Run 46 (seed 39,043,781): new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs