A858DE45F56D9BC9 archive

201307041759 1hnp61

explained decrypted filler

seed 55

Metadata

Post ID
1hnp61
Title
201307041759 → 2013-07-04 17:59 on A858's clock
Posted (UTC)
2013-07-04 21:59:41
Timezone
UTC−4 · title 17:59 against posted 21:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307041759) = de504ff2714e28b503def4130ed5e439 (name+title)
GUIDs
36
Filler GUID seed
new Random(55).Next(9) ✓ verified
Run
Run 48 (seed 387,048,281) (seed)
Draw
18 · predicted N = 36 ✓
Machine boot
2013-06-12 10:29–10:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307041759 (name+title). Key = MD5(password) = de504ff2714e28b503def4130ed5e439, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b35c86bc-981d-4049-a596-a531c8d67da2
  2 0854ca2d-52f5-8c64-9c71-457840e9bc9a
  3 68b5177b-1a18-1af7-b681-9a6307df8e27
  4 82d1aa6f-d3c6-20f2-bd19-2ab4cb002ea8
  5 cb188708-7561-05a9-b368-6e800fd519b8
  6 42e369b6-82ca-5fd3-a3e9-b52ac46d649a
  7 0b721186-e3c6-43e4-b09a-509e3920982e
  8 b1627d76-2cea-00b2-b02d-a738a79ceb2f
  9 68be1d37-e853-76c6-93d2-1b5410f9c088
 10 1b038598-9ee5-4b26-8b5b-5f086f9f6b1b
 11 3d1ddef1-7247-7f97-b748-d38104ae043f
 12 9eec20a3-23b6-390d-b01c-8229a4512f46
 13 b9e1ec83-0014-3103-a912-a99dc9215bdb
 14 124acc01-8ccb-012a-a322-7229ef75984f
 15 77263108-9179-4587-b5cb-2544a611941c
 16 03598ac1-ca9d-34f3-8c73-c6ce04928a3e
 17 4ed4f531-5eaa-87a0-b878-d8fb46d57259
 18 b1b3668e-c07b-09a3-ace0-a647a6328581
 19 2e743772-8152-1a4f-9349-ee122ffab8cd
 20 4b8664fa-108a-50b7-b03c-bf225367b480
 21 4b6eab99-d533-1518-8083-76f1b9f00754
 22 fb0c5d9d-6e1a-3411-bf1e-f9724bf5c5b9
 23 36c0d3a5-eb39-2acf-88f9-107880d3169b
 24 cbcfd69c-7ce9-20c2-9926-290e76f1d057
 25 84867e4a-436e-034f-8787-db299384ba6c
 26 4502aa57-9204-8ae6-ae6c-fa7d115cf28b
 27 754e97ed-0bc5-1fea-b59f-7eda0a665ae8
 28 d9f88715-5719-69fd-918d-e5d6a2cc299d
 29 39660453-2dd7-68ce-a8b2-6cc0ca0df7aa
 30 aa399898-8320-316e-86f4-30232a154a32
 31 53b6f172-8a29-4e03-8b1b-4abced1cd20b
 32 10ac81fd-c97b-802a-92df-62208f888c97
 33 944778f1-e277-35a7-b0c2-56c003ac42cd
 34 6a2100ba-bb5c-393f-b649-7418d3f46d9d
 35 d6d2d65e-312e-7017-94ba-b453ad61f636
 36 f2b56a85-f98e-128d-945a-b3c03ae2800f

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 481205407473304380151322081663483371. Exactly this sequence comes out of new Random(55).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 18 of Run 48 (seed 387,048,281): new Random(387048281), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-06-12 10:29–10:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs