A858DE45F56D9BC9 archive

201306281759 1h9y41

explained decrypted filler

seed 904

Metadata

Post ID
1h9y41
Title
201306281759 → 2013-06-28 17:59 on A858's clock
Posted (UTC)
2013-06-28 21:59:49
Timezone
UTC−4 · title 17:59 against posted 21:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201306281759) = 02165542ab595b9c0c18e0a82d98fc2f (name+title)
GUIDs
36
Filler GUID seed
new Random(904).Next(9) ✓ verified
Run
Run 48 (seed 387,048,281) (seed)
Draw
12 · predicted N = 36 ✓
Machine boot
2013-06-12 10:29–10:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201306281759 (name+title). Key = MD5(password) = 02165542ab595b9c0c18e0a82d98fc2f, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 4fe14c50-031f-8d29-bd6f-e55be28885d2
  2 e65a52be-b4d0-0e2d-aabc-015c07ba199a
  3 91722833-2d13-552f-8cc3-efce526a6255
  4 e208d437-c977-467a-b3bb-d17c96893112
  5 0e5fad0c-d268-38c6-a58f-596be8a6d969
  6 faa4d6d7-8d7e-5e65-b8c3-b6dbb358a30f
  7 73f521bf-750c-82ef-9d0e-e414707b4495
  8 6127a30b-11c8-89f9-8595-b79a14c8224c
  9 7bfe649f-2a3e-7cea-ba8e-290fa6a516e2
 10 97cc2bba-cd5c-5267-a95d-9367df784c0e
 11 c50d63fa-c51c-2d69-9939-dcf7daa8063a
 12 a7b38efe-fdd5-21b9-975f-9ef81ef1da75
 13 cdec31d9-7680-015a-b320-1d07e44ca720
 14 fe7c2179-a450-7cca-a58b-ef8d0819bed9
 15 98bd1d7c-2a19-6439-a6ce-4bff082ec7fe
 16 f39a1d53-0c57-5857-9ec4-ba366ca1dbbc
 17 e162011f-d4f9-75f5-aa3e-33238791190f
 18 89742e6f-3932-4d72-8891-502bc5a12ab2
 19 183856f6-46f8-1e25-8fb3-ac2897d4eebc
 20 dfcbd4fc-3a75-3eec-bae6-2b894884544b
 21 8c7f5527-6ac5-84c2-a2b2-4b4e7320d06a
 22 9485c38f-2baa-5909-b430-614359eed02e
 23 d3611afa-8f9b-6b78-aeaf-d321c1b7eab4
 24 8f78781c-efa8-7c59-8b7a-560624357496
 25 8b753396-7035-2f1d-a11d-7f3d3cf5761d
 26 96d3686e-8db5-826f-957f-707f47d07768
 27 aed52648-59dd-1fb1-bc0c-d2347a24158d
 28 5a20587a-3326-7e93-a0f3-a89055b7b3ae
 29 abcc4f8f-a320-221c-8d1a-8d9c7dd27b6e
 30 346de7d4-d0e8-1593-906f-e7226094eb20
 31 e6c54872-e172-8359-a7fb-9d5af056f28a
 32 a0d75210-4549-5136-ac89-d6c16fad86d5
 33 7eecefb7-6792-72bd-a66b-766e9149d788
 34 7eed1114-1045-57e5-a967-4015a53b50bc
 35 d7634a0c-9cb1-2961-a923-00d1e7daec5c
 36 12c2eea3-80d8-8e74-9867-26c8482538b7

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 805435887522076574138567281721857528. Exactly this sequence comes out of new Random(904).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 12 of Run 48 (seed 387,048,281): new Random(387048281), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-06-12 10:29–10:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs