A858DE45F56D9BC9 archive

201305260843 1f232f

explained decrypted filler

seed 338

Metadata

Post ID
1f232f
Title
201305260843 → 2013-05-26 08:43 on A858's clock
Posted (UTC)
2013-05-26 00:43:48
Timezone
UTC+8 · title 08:43 against posted 00:43 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201305260843) = 7c0f259a30756b50e85f65d69bbd5660 (name+title)
GUIDs
40
Filler GUID seed
new Random(338).Next(9) ✓ verified
Run
Run 46 (seed 39,043,781) (seed)
Draw
61 · predicted N = 40 ✓
Machine boot
2013-05-15 03:07–10:31 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
12 · 5
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201305260843 (name+title). Key = MD5(password) = 7c0f259a30756b50e85f65d69bbd5660, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 315a8d81-2557-2b38-943b-65b1a3501142
  2 c415d4c0-a9d6-8172-9094-19c871659453
  3 3f6a8d46-8317-0ccd-8615-264fec870da3
  4 eb2feb2d-942a-63cf-8be8-4e0ff4d61fff
  5 53feec23-97ef-76dd-97a5-4197514d4b0d
  6 eeb5ad03-f060-8f12-a956-d2df1ed45309
  7 004ba9f8-be85-3899-9bda-5ea0dd3c7f3f
  8 05e60b48-9401-0f28-8b5d-0c49316bc0ef
  9 9d24420f-7752-797f-a564-b3935d9edb8d
 10 d93f0e78-7ee7-83f4-a500-f7b060387bea
 11 40c1493b-4103-252f-bb6a-0fe71287d55f
 12 c4e776c8-0620-30e4-a96d-ec029a24bd1a
 13 4c8e5768-78e6-830d-80a2-e2a15d9745cf
 14 ed7710ce-c7c9-2a60-8385-16543b1e49fb
 15 a05c3433-feef-5f27-82e3-fabc6e5e7c05
 16 89c50549-9220-1a9f-aa34-b9140492c8f9
 17 565e25fb-fdcd-8ae7-9a24-959afe1b3dcc
 18 10173bd9-b195-48a0-90bc-1abacc45907f
 19 d987e2b5-c08b-7e1e-8a76-71ccc017bd2f
 20 ca61c4a9-5d39-1671-ab4b-f70abf4eaacb
 21 99be8a6d-2605-6a53-99c7-75a6dd6cf6dc
 22 21269e46-c4b1-6667-ab36-23de71ba4e07
 23 cbeb71f6-f94d-176d-a154-b603d55fd017
 24 2f77f2ea-9163-1b21-9e0d-2850ab13baa5
 25 d30fd991-3617-7c68-b794-e0212e424534
 26 e64b4d28-58b9-8d65-aca4-88ef051ae412
 27 0defb5eb-5803-49b4-b7bb-6c507c0deb44
 28 15c819c9-48d8-1237-a97f-037f973de86e
 29 3f23cd2d-d358-8d7a-8f82-7224cb9d412e
 30 c1e7f707-5474-276d-a027-09c325bbe282
 31 49c8626d-983a-8b5d-aa53-32c18985d0f8
 32 f19544aa-6cb6-48e9-a137-d5f30b4d4cca
 33 8dc6defd-029d-1051-bf2f-15a70728fdd4
 34 2a010f9b-1104-4bfd-ba22-dbae6f622fb5
 35 673b5483-4b31-555c-8a9f-7404ad14a617
 36 8155a6ae-e39e-3216-8520-8da4bb6bec68
 37 7050c08a-7e4e-0245-928f-3269e666c7cf
 38 96b1234e-7bf2-649d-94d4-5e12f46b9ba3
 39 e3818deb-b95b-26f9-87c0-a0570019ff16
 40 3ae4175b-064a-7828-be8d-f13d88fbedb1

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2806783078238251847166117841828414530627. Exactly this sequence comes out of new Random(338).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 61 of Run 46 (seed 39,043,781): new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs