A858DE45F56D9BC9 archive

201305180055 1eizb4

explained decrypted filler

seed 903

Metadata

Post ID
1eizb4
Title
201305180055 → 2013-05-18 00:55 on A858's clock
Posted (UTC)
2013-05-17 16:55:59
Timezone
UTC+8 · title 00:55 against posted 16:55 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201305180055) = e9efef217485eaaedaec3feef4907e37 (name+title)
GUIDs
40
Filler GUID seed
new Random(903).Next(9) ✓ verified
Run
Run 46 (seed 39,043,781) (seed)
Draw
34 · predicted N = 40 ✓
Machine boot
2013-05-15 03:07–10:31 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
10 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201305180055 (name+title). Key = MD5(password) = e9efef217485eaaedaec3feef4907e37, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 60933916-5baf-4c45-a600-e6cffcf18bad
  2 fe6fb592-2a12-63f8-906d-d165929b4c2e
  3 6502f04c-3039-8843-9e6f-f8bd6e0868f7
  4 8dbd0cf6-9cf7-2a4c-bf62-8ec54a9248d4
  5 51e377ae-f4d8-83e0-9dd7-af21c3413fc8
  6 630fb6de-a03d-6915-9550-c8cfc3d811f3
  7 3a760e8b-9890-4393-b109-7b4b01c99cc4
  8 38fcaca7-9894-461f-b583-37a398ab39fb
  9 23a86968-fef4-6184-a1a7-ca1fffe520c1
 10 7f2d380a-5f10-2108-b08a-13ae3cba50f3
 11 0c23d3e4-df70-5ca9-9b22-e10290d81cfe
 12 dc44a056-4c90-4ab0-be79-945aa12a1afd
 13 17b3e2ed-e3d3-3bbe-a480-7abbf90e4744
 14 2e48c30c-2798-22ab-8a51-067405f651a3
 15 2da245c7-d1b5-0cc3-a347-b47ecf387b3c
 16 1a9b95ad-3cb1-833f-b313-c403d3381c77
 17 fd5ca8e6-4b13-464c-b185-7f9fc51ed6a6
 18 b075ff5c-c9f6-7ce6-b8e5-8543878fbfeb
 19 ff4c3eb4-d8ea-160b-a0ad-a876c7f6f403
 20 b1f8ae6b-66cc-8c8e-97b7-9d6545be30c7
 21 ec3951d7-7901-760b-9109-df2eccaed457
 22 e299ee76-5e2c-317b-9015-eefc7e271cb0
 23 b172c9f9-6fec-5f33-8bd3-0191afa00658
 24 3d1353ae-a392-4cd7-b1a4-be5226290da1
 25 077feb08-d5b3-1877-b3c2-0537262bcfdb
 26 3e35896c-10e0-2f3e-b837-2bc6589785c1
 27 f16b7b55-1545-24b7-9ecb-f90222aeddf5
 28 b4b8938b-d8e3-1f79-a848-c1c660e0912f
 29 d3778b98-5a05-840d-a251-da279bf67083
 30 5b57aa4e-f475-2c48-80cc-1b3d873168da
 31 56fa2852-1c20-49cf-aefa-23bacd5971be
 32 6ab28544-fbc8-2002-be7b-3f1b6ce14163
 33 545cdb00-f1ff-35a0-93ea-b608e3101a0b
 34 33e43d78-f73d-54c0-81d2-1cc60c6be34a
 35 22318f4d-7886-8496-b928-4b374d9df158
 36 ae6da42b-8fdb-8025-bf35-b51e1ca24200
 37 932da7aa-e3b2-00fe-b80d-7666e8f5d887
 38 ac6e45b2-cbb8-6e46-84c5-55c68aa9ad1c
 39 843b6004-c31b-8351-9154-f6865b7e962f
 40 d2b0e149-5d2e-6e5e-9848-d05c083c4a82

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4682864462543208471873541221824235880686. Exactly this sequence comes out of new Random(903).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 34 of Run 46 (seed 39,043,781): new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs