A858DE45F56D9BC9 archive

201307210859 1iq19o

explained decrypted filler

seed 646

Metadata

Post ID
1iq19o
Title
201307210859 → 2013-07-21 08:59 on A858's clock
Posted (UTC)
2013-07-20 23:59:59
Timezone
UTC+9 · title 08:59 against posted 23:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307210859) = fa0a035b491f45ef36b1e1ac1d54ec89 (name+title)
GUIDs
40
Filler GUID seed
new Random(646).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
30 · predicted N = 40 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307210859 (name+title). Key = MD5(password) = fa0a035b491f45ef36b1e1ac1d54ec89, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 74ced45c-88fd-111f-9ba0-e5eb5efc7138
  2 41f9dbf2-aaa2-39c3-9c76-c5cd5c92b024
  3 0b718794-028e-219d-b18b-c4a2c1deb0c5
  4 d5f2a5a9-d431-3005-a5ec-9caf1b284328
  5 325ef5ec-9ec9-7f24-958e-92df0179f1fd
  6 d9106038-7c60-0e52-af2d-eed83779b461
  7 51575cab-4f29-39c7-8f93-da3d56ce4a4e
  8 9eeb3d8e-0817-4cc9-8f2b-9dca9e8de98e
  9 a092adc8-8823-8fc0-a1dc-6cbe6211b9ef
 10 6ff00a02-17c2-4337-9cf0-b5d05f50fc76
 11 ab988aa0-f222-1135-b9da-9617d3445fa1
 12 43fec68d-85fa-7440-9a54-693744d0b989
 13 62d39a51-379f-6c46-b5b8-1c7ca7f1bba8
 14 68ebd363-f2f6-4cc5-97b7-00c4a6365dac
 15 57d64e33-bb5b-1e6c-b989-385619da2686
 16 5dedfa10-7ddd-4bad-a816-1f9f0de300df
 17 e773bc92-b65c-38f3-8804-c6ec09c960c5
 18 2abc32d2-3af0-4f58-aa97-8fde669f76fa
 19 13ed8953-2b08-1d22-9cf0-0e901beda4c1
 20 2f9cc813-726a-4d1e-84a3-23b12f9638f5
 21 d2408a5d-1f9d-5d7d-a1a9-9a713d21203b
 22 0fb6b2cf-d937-336b-b768-16683714add5
 23 b5082823-25fa-1699-a503-9313c47ab4c5
 24 2c4704cc-ee65-60e2-b018-b2f5f2af3142
 25 149c8b68-97de-0108-a17c-ca3a8eb3d3f2
 26 298f2135-8cb0-0b31-93fd-2202c1c166ee
 27 f0f58642-3b9e-3330-8a7e-276100e537d7
 28 b28d0653-15c0-82b9-910d-df9d4269d1ee
 29 134fc734-22d0-8da2-9a2d-f9036e3eaaaa
 30 4e2d09d3-36fe-330b-aca9-3475b8c2f36b
 31 746a3f91-70a1-6fcb-a588-3505bd865255
 32 8ecddde0-9532-597d-8fe4-06ce9f9de3ad
 33 a3997a70-308e-0a7a-800e-3f592196f711
 34 a0779c84-5c58-1a33-b224-85398c696e17
 35 be34e876-ad86-1509-9205-df0f9e3a672c
 36 11aaa446-19a0-68eb-817a-32d727bf2efd
 37 2f993dd5-1eff-11df-8f34-971b5f16aef0
 38 97e6796f-ddf7-5eaa-8d4c-2d721e98ab6f
 39 ad11d207-de98-853d-bcd7-df6ad3149db2
 40 25401bf8-85d5-6ac2-b46d-955e0853fce0

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1323703484176414341453160038836501161586. Exactly this sequence comes out of new Random(646).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 30 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs