A858DE45F56D9BC9 archive

201306070859 1fux70

explained decrypted filler

seed 955

Metadata

Post ID
1fux70
Title
201306070859 → 2013-06-07 08:59 on A858's clock
Posted (UTC)
2013-06-07 12:59:57
Timezone
UTC−4 · title 08:59 against posted 12:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201306070859) = d1b2f5bad554b63d7190d69d208ef235 (name+title)
GUIDs
32
Filler GUID seed
new Random(955).Next(9) ✓ verified
Run
Run 47 (seed 1,776,839,421) (seed)
Draw
6 · predicted N = 32 ✓
Machine boot
2013-05-14 23:26–11:26 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 5
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201306070859 (name+title). Key = MD5(password) = d1b2f5bad554b63d7190d69d208ef235, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ed245f5e-33b4-507f-8f82-6c0498c02203
  2 136a2ef9-2c06-02e2-91f8-69d9483619d7
  3 db1edb54-30b9-2bc6-9ce6-89df6604b2f6
  4 96badab1-bb5d-3403-b2e3-45225ae164d5
  5 a922d0b0-ef4f-3a21-a314-a1097d60b914
  6 25a78738-9009-14ed-87a9-03df2849fe3f
  7 655d3e88-b339-75a5-9c87-ab7399ef64be
  8 6031ba84-d30d-4219-b254-3a74e2812468
  9 cdf5ab91-04ef-113c-80c8-5eaf936470cd
 10 77723c4a-81d2-31f7-bb3d-5820ea7a59fe
 11 79ab2920-a679-7df7-980c-7e65eb697e18
 12 144a9497-ffbf-099d-b320-f79ed076db46
 13 caf6b914-747e-1411-a41e-20e21cfc1a31
 14 d566edaf-3cb1-2c13-b2d9-760b6cbbb4f1
 15 4d19e558-4bec-4182-bab7-20bfa5aa5c55
 16 3c0c4162-ea37-42f4-b82d-dbbcbd453159
 17 d4d7974d-9fd3-2885-af17-6fa3e1cfb063
 18 abd64105-6b77-0b98-a329-3a0ecfc4a0ed
 19 0926813f-da1d-4984-b5eb-91ce4623091a
 20 c360c9a5-26f5-0f92-9972-d1b169911f65
 21 6b0a8e5b-46e8-63fe-9e53-438728b7a8cb
 22 8ce3db28-a200-1964-8902-a27177907bb9
 23 a47a2156-9834-3584-bc6a-dc16001243ce
 24 c7587ab6-a587-5ed5-92be-1a42459d20fb
 25 ee90dce9-cdda-271c-8925-1fbaba7c151b
 26 82572157-be6d-6a9b-83de-c0cefafe9783
 27 06c4f75a-3052-0687-9ae3-3b7aa930b257
 28 e346a5fb-bfdc-36e2-a719-473f5d02ebb2
 29 f38c4553-2d4e-2019-9084-010f43737b18
 30 5711cabd-0570-17e6-851d-a52b6de4b943
 31 898cbc73-6bdc-6fe6-81e2-766c5bc94431
 32 d94f8b98-36f5-00f4-bb0e-4b5265909ae1

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 50233174137012442040613526032160. Exactly this sequence comes out of new Random(955).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 6 of Run 47 (seed 1,776,839,421): new Random(1776839421), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-14 23:26–11:26).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs