A858DE45F56D9BC9 archive

201307210945 1iq3y8

explained decrypted filler

seed 718

Metadata

Post ID
1iq3y8
Title
201307210945 → 2013-07-21 09:45 on A858's clock
Posted (UTC)
2013-07-21 00:45:59
Timezone
UTC+9 · title 09:45 against posted 00:45 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307210945) = 045e94b8a26fb58b2b2183ac4cf7ae7e (name+title)
GUIDs
40
Filler GUID seed
new Random(718).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
53 · predicted N = 40 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
8 · 17
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307210945 (name+title). Key = MD5(password) = 045e94b8a26fb58b2b2183ac4cf7ae7e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0d857d15-8f72-7247-ad4e-de7579b84642
  2 d746fac2-97ca-4160-9574-e06af6419892
  3 e5751f0b-5945-5fce-a740-abe8cd4472f9
  4 fccfe109-0cdf-7114-a7bc-8366a2a6dbd1
  5 af57177b-fe3d-360d-be3c-665e4fa97caa
  6 e708725d-1913-01f2-99ec-8f1d8e95ff70
  7 af3d7879-dd83-5c19-9b3c-ebf1cd9d5d13
  8 a2f9e2ba-0156-5e93-9413-87589a75896a
  9 02862735-f555-76c6-97a2-930b64d134da
 10 175b16d7-e483-0211-a96a-56eb3a47a6a8
 11 5275e25f-5553-267f-a964-6cf65c66cbf4
 12 fbcdb8ab-6013-0159-8bc3-27a0b21ba693
 13 a09f208a-7fb8-2eb1-9a54-d16178d9b6be
 14 c815bc09-af26-0cd2-96d2-b3bc1ef720f9
 15 e8d405b6-efef-5126-b890-6bef277c2369
 16 70537fe5-6503-3186-a0e2-4006e0a46b68
 17 a8e8ef54-81de-6361-bcc4-3afcaa9d52a6
 18 2cfd7ab1-9e7e-1902-ba3b-aec868beb306
 19 ea3c6b0f-3cc1-13bc-9bd9-7da57dcc4d7b
 20 2c3eff98-d71e-24f5-9f3b-60787f3376be
 21 f603b54a-ae06-1cba-a66b-fc30901da4d4
 22 e929faf2-70ab-8bad-b9c6-f976ab3ac089
 23 7f3faf48-fbe1-33b4-83d7-823b8962b988
 24 60ec5a89-1d68-7fc6-b0a1-5da373cf50f3
 25 e358d359-8d56-01ab-a5df-e162d97e2fa3
 26 cd1a3368-1ef6-2f4b-91b1-2e9605e2e123
 27 a8469e71-5c81-2828-940a-34cc26dec64d
 28 0b9473d5-5776-561a-8e3f-f8497c81db2e
 29 e784bd00-9311-7f1e-a2fe-e91f82227c36
 30 ccbc4d89-de37-2a79-8ed3-3ec778258f4a
 31 49e42a7f-59b0-280b-8d64-ea4e05f7d4d7
 32 9e8ffcea-4fbd-5c82-8d69-044ef4045f9f
 33 de473f1a-616e-05c0-8531-e514b4c8cb7a
 34 ec73f32e-d02d-84ad-b7ec-3fedd1ff2ec6
 35 c5db8756-3402-347b-a9f9-e4bc01b99342
 36 86f7c728-b1d1-744f-b0ce-2f0cdb84a4fc
 37 bb8e7314-0285-7174-a231-0f20bd4cb622
 38 e162e314-5e5c-6d69-9552-2b6e530d961f
 39 1cd49034-c4c9-265a-ae81-6df795fa111b
 40 61d7999c-f36e-5058-8888-a229e7ce4882

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7457305570202053611218370225722508377625. Exactly this sequence comes out of new Random(718).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 53 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs