A858DE45F56D9BC9 archive

201307200937 1io2bp

explained decrypted filler

seed 948

Metadata

Post ID
1io2bp
Title
201307200937 → 2013-07-20 09:37 on A858's clock
Posted (UTC)
2013-07-20 00:38:00
Timezone
UTC+9 · title 09:37 against posted 00:38 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307200937) = 70014c3b47db37270f249c19eb4ea81d (name+title)
GUIDs
40
Filler GUID seed
new Random(948).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
20 · predicted N = 40 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307200937 (name+title). Key = MD5(password) = 70014c3b47db37270f249c19eb4ea81d, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 f41b96fa-6d69-8dc3-9621-2c4cd89a5335
  2 2cfdaf43-ed82-8089-b3c7-65502df795be
  3 146a7eba-2d70-30b0-b2ea-a77d8dfe3625
  4 8638e53f-6ca6-892b-97a2-477f279b8f68
  5 01e7a48b-801e-14df-89c8-6f41acab78b4
  6 05b96560-4d4f-0a1c-a4f0-0f7f0b6f1032
  7 f460892a-c13f-5c8c-95dd-3c4cbe58d167
  8 31782c48-a076-0d34-907c-ac3f8434e976
  9 5d62f265-7dfe-23ad-b36c-d35fb0b7e7b4
 10 2eccda2a-1c28-71f8-aede-339e2360d2e1
 11 a680982c-5f86-6172-bc5b-a1a7e97e809e
 12 862773bd-ce6a-522c-a1de-1d5e568304e5
 13 0f6243d4-c812-317b-92bd-369a1e7672ed
 14 a654a6f7-cd21-6127-a3e6-d813b1741881
 15 f92e66eb-1394-49b7-838f-7d708a298d33
 16 67087acb-9e96-0062-b1b0-42bd71214d9a
 17 b5c2bbc5-0b80-3d0e-9eee-d0944d1ed1f5
 18 0a45ded6-7b17-6fdb-9326-e885c99a03ee
 19 f64cd470-3e33-3d03-b209-f104689829c1
 20 344ee0db-4b74-37c6-ac49-2c1662a05668
 21 2b1d5982-5861-7470-823a-7fb1c0187af7
 22 b90982ed-c255-33c3-b3b1-7d1211d74e73
 23 a0d6646b-931a-1113-84a1-ad9a6b583166
 24 acdd0e53-b985-1b8d-9e82-ae3f82470e1f
 25 cae7d8b2-262d-5503-8ab9-030726f6ee13
 26 6bfe0169-48af-29fe-9603-592ed1484bf9
 27 4bedf284-a62e-8b87-894e-b79702b63c32
 28 cc7b391a-a326-0973-a6ad-eca5038ed4d3
 29 784562fa-3683-351c-b448-161e7156415a
 30 a96c925e-d6dd-5667-a12f-3060f699f951
 31 ce73c869-5280-1271-bda3-62312eefbeb9
 32 2c7d339d-a54f-196f-8b62-ca790748c560
 33 fbcae37b-26c0-47d1-b914-0f1c61280258
 34 3fd3c549-2fbe-6086-949f-fb37c5640a16
 35 02af6233-80c5-59e7-98d6-1d3268031df8
 36 9abd36a5-0d8a-7ef8-b41b-108b7511a0d5
 37 96184ea2-6b00-2d8d-8609-61e2df55c536
 38 fa65bc0e-d5f0-3275-96f7-c0a3971540b8
 39 1252dce7-5dd8-6e74-a371-0183bc6afa5a
 40 391a8b94-0ea7-2486-beed-3ccd4311acae

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8838105027653640363373115280351146572362. Exactly this sequence comes out of new Random(948).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 20 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs