A858DE45F56D9BC9 archive

201305162213 1eg92r

explained decrypted filler

seed 255

Metadata

Post ID
1eg92r
Title
201305162213 → 2013-05-16 22:13 on A858's clock
Posted (UTC)
2013-05-16 14:13:59
Timezone
UTC+8 · title 22:13 against posted 14:13 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201305162213) = 5d8b223174b8a7d3a60639e604a6e50f (name+title)
GUIDs
40
Filler GUID seed
new Random(255).Next(9) ✓ verified
Run
Run 46 (seed 39,043,781) (seed)
Draw
24 · predicted N = 40 ✓
Machine boot
2013-05-15 03:07–10:31 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201305162213 (name+title). Key = MD5(password) = 5d8b223174b8a7d3a60639e604a6e50f, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 f5712eef-6ebd-89aa-9c8b-cf1dd48fcbc0
  2 19a6034e-fe4c-5821-aa04-819cdccd19d9
  3 60a7152f-b32f-01f0-985d-651a7f9d1210
  4 77fa0596-3882-8aec-bf26-a0bbb33988db
  5 6e2cd5ba-cc31-357e-b20a-89de5263fc63
  6 dd7c6f30-0ed1-3be9-b18d-5b621d85b4b7
  7 6ff7d1d8-9f6a-1058-b259-9ccda4941da0
  8 01e4edc9-d29e-34d8-bfa9-ab4abc978aa0
  9 9a64489d-50a4-4b56-bd27-b498ea0b90a3
 10 bc93c1fe-8dce-2313-9a65-94d7cee4669a
 11 744da679-a136-1822-adec-571db695df58
 12 6edd019f-eefb-4daf-bff3-4f658b226dec
 13 fa9ea6ec-3ca0-866c-b6c2-d4b79d12c706
 14 f89368d7-44d3-1b49-989a-2d149ee17fbe
 15 6da1a373-fede-450c-8abd-ee1da06c1848
 16 73b59f3d-e049-296d-8726-fade7b015884
 17 6feaf0d4-7ed6-04ea-b5de-16e0302a89e6
 18 55cec3a7-0e8f-0ba9-aaad-1e622e69132d
 19 6004fd20-dfe8-5c22-b94f-3da14f50b96e
 20 57ae4eb3-1223-0a1b-925d-9ea8a27d910e
 21 ff973f4d-5376-6afe-b7d0-412edd19c60a
 22 c67e8256-2948-36a2-99e2-c6538395178b
 23 e094b7ee-8c94-0cc7-bc8f-320e7a815841
 24 696253e9-65f8-120a-b671-1601366af5ee
 25 3604f677-d954-6f41-a013-89ed49068676
 26 6449440f-1b5c-4ca1-813b-0090c6192df8
 27 17515e84-064c-1117-9160-893fbba969ac
 28 c5c63bb3-504b-6d75-8bd1-d63ceaf80938
 29 aeb820d7-68ad-8972-a9b8-e69e2a8c6d32
 30 8d4cd230-2279-45e6-9f76-b35dd35222a6
 31 1ee75986-3c71-212b-a068-60ec1aeb1a11
 32 97947076-45af-58a6-b304-12487625d402
 33 fb5317f8-3c8a-70f6-9370-79818c8aa43f
 34 044c0cd8-7d36-332b-b9fc-78ad7bcab313
 35 408b16e8-a3c0-6703-8bc5-faa1cd78d874
 36 2bda6262-cc93-7419-a263-53358eaa0397
 37 c988fd73-5adf-2407-99f0-662bf508ad5c
 38 68ddfefd-305e-1824-a668-8aae9cb0d04f
 39 4408367e-3976-0952-9243-7a65441eb6cc
 40 1605b500-b8f1-6d8d-8683-6fe36cf2e851

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8508331342148142005063016416842573672106. Exactly this sequence comes out of new Random(255).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 24 of Run 46 (seed 39,043,781): new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs