A858DE45F56D9BC9 archive

201305251031 1f0d5l

explained decrypted filler

seed 646

Metadata

Post ID
1f0d5l
Title
201305251031 → 2013-05-25 10:31 on A858's clock
Posted (UTC)
2013-05-25 02:31:50
Timezone
UTC+8 · title 10:31 against posted 02:31 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201305251031) = e684c1ed430be1c80993042fabf17e8c (name+title)
GUIDs
40
Filler GUID seed
new Random(646).Next(9) ✓ verified
Run
Run 46 (seed 39,043,781) (seed)
Draw
58 · predicted N = 40 ✓
Machine boot
2013-05-15 03:07–10:31 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
14 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201305251031 (name+title). Key = MD5(password) = e684c1ed430be1c80993042fabf17e8c, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b54eab24-0c43-1341-9531-6e1d66860a80
  2 d67a02d1-9397-3be1-b504-b0ced8f0895a
  3 2f0816a8-ccf9-2303-91b6-bcf94680375f
  4 96faf8a6-8aea-3502-a5dc-151650d62ebc
  5 0aa9a0d7-3354-782c-bbfc-6be3d79ad93c
  6 d577cce8-cad0-01a1-8728-3d275b43e790
  7 3de42f60-3758-3ae3-afef-dc0fd29ef31d
  8 f6e0f246-3a5d-419c-823a-b491e8f624ba
  9 9ba81192-0d32-87e8-88af-e12b926b4e6c
 10 98dea388-e95d-4669-826a-d385867ba985
 11 6129e1cb-ad62-1fde-a9da-4a96cf91801b
 12 1e258bae-8e14-7887-8215-9e43e31bfd6d
 13 1d3555ef-2a1b-6844-8c04-712dee44c7a1
 14 0f3c60a9-9e08-4948-b0f1-0bc5bbac52bb
 15 c10a42c4-5c8c-1388-ac09-2ba8d2748648
 16 4f53ca56-4919-4ed8-befd-a260daa6c708
 17 1240dc62-4a8c-3c80-8598-2a347a75c7cf
 18 19d01f91-c95d-430d-a18f-4664247edd0c
 19 b2c04ea2-e5f6-1622-a017-1329693fbf89
 20 13b27ccb-c5aa-4323-8716-82e8739ed0b7
 21 0aa1bcef-d6e1-5f43-a4fc-2c5fd0768d5a
 22 a634879e-00f1-3f2f-9a2c-64531d91a6ad
 23 8073fef7-16b0-155f-8043-6164a19ea4aa
 24 c0e6a2f6-7359-693e-a0c0-621d14dcb159
 25 7651b9e0-b760-0483-9487-edbd268e397b
 26 5f599f9c-5f46-0d7d-b819-37b290e22f86
 27 6a0a8525-8c7f-35c3-8373-31028db3ab55
 28 c26f799f-095a-8c01-a411-b99b8e7e8523
 29 27eaa9ec-d353-86ef-a2a3-cdb4b3d905d4
 30 5c8e5ac8-e6dd-3495-97e0-a49ca07563a4
 31 b697f1e1-1425-6cf9-a63f-58c3b8b2a34a
 32 4c54c0ad-9aaa-514e-908d-61ff61d96b38
 33 9a11ccb4-ec93-0a7a-bac6-8c946177db46
 34 201afdc3-df11-1beb-a09b-61d9404ca787
 35 fe1caff8-f632-14b4-828c-22bb10e77b70
 36 36c72d4c-ab34-6282-bd65-977c148c51b9
 37 214d690a-4daa-1818-9621-546bf231ac30
 38 b3182e82-f022-5bf4-b49e-d8ab65bcb59c
 39 f75eacab-88ce-8532-a61e-0ca15e71745c
 40 780f6bc3-66b5-6ad9-a723-54ed16a9e107

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1323703484176414341453160038836501161586. Exactly this sequence comes out of new Random(646).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 58 of Run 46 (seed 39,043,781): new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs