A858DE45F56D9BC9 archive

201307230908 1iulyq

explained decrypted filler

seed 631

Metadata

Post ID
1iulyq
Title
201307230908 → 2013-07-23 09:08 on A858's clock
Posted (UTC)
2013-07-23 00:09:00
Timezone
UTC+9 · title 09:08 against posted 00:09 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307230908) = dbb850486b4a17a6b3bcccfb97655f21 (name+title)
GUIDs
40
Filler GUID seed
new Random(631).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
64 · predicted N = 40 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
20 · 8
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307230908 (name+title). Key = MD5(password) = dbb850486b4a17a6b3bcccfb97655f21, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 45eca162-ef24-33a8-916e-f41db623d14a
  2 fcc9f6a4-20b5-8db1-ab82-7a14b0caddf4
  3 97aa4ae2-68e8-7983-8549-e03a2d4cd735
  4 7c184f9f-dd49-267b-9252-57472b222b1a
  5 72f0aa0d-cb1d-0681-8392-bf582a231db8
  6 2c174563-df76-8c97-b621-bee52c013ec5
  7 32efe4f6-34ab-5766-9dbc-20fd7e7d3b10
  8 ab35416c-8aed-09f7-b2c7-7bba834b51c5
  9 06a0616a-6620-0e60-a75b-aa9f27e4ab53
 10 d65ee94d-1a0e-8f7e-aac4-abf83911e33e
 11 c0c4aad2-ea09-1ff4-bbb2-e6e3bfd3d29e
 12 245d1198-85a1-0c03-b6d7-e26991a3aa28
 13 567d1d04-ede5-3dba-8590-53d1f4fda359
 14 dde0a718-9c46-61c1-839e-a63ff952d0ef
 15 e838a057-0c94-569d-8e89-47fb0e005c51
 16 ce951c8f-1ca7-0db3-a818-485ed20bfb31
 17 17359a90-fd32-02f3-b9d4-1ffc809bd6a7
 18 7ecbbb51-0bdf-1dd2-853a-6f4a296532fe
 19 c8c5e5a6-4633-6405-ba01-bea9d14c2d10
 20 86c7b282-fbf4-58a1-96ef-0ac33c501557
 21 0c1d07b0-1e0a-557c-b5aa-05fa0923ddf0
 22 1172a4e2-39ee-5bb5-931d-6521c214791d
 23 bd81c150-3f05-550b-8638-e325c18596dd
 24 1ecfb74f-3bd1-41e1-9845-790ed49bc282
 25 be0bf5a5-bded-4740-9153-f5f6d05f931e
 26 a18bbb35-2bd5-3743-b3a7-1dc4d1ce5ce5
 27 8aa4b234-4b10-4ea2-9a5d-44fc4053aacc
 28 08ebeff0-1c9b-543a-a060-dd73dc7c38ba
 29 3cad1a04-7200-7b02-82dd-0d1710fca386
 30 294269ef-999e-2ca8-a56b-89dcaf324730
 31 d4e95e2a-271b-1c5b-b5f4-7750e4bbbcc2
 32 4dd2ee47-3fff-5e23-906a-d5a448d81a45
 33 bdfc68d7-4bc9-02f7-8251-ab41a6220874
 34 9821306c-e8df-770a-a019-482d70800d39
 35 63291a61-a4ab-8ab7-9602-4315e8cddf82
 36 1ea7a03a-b5a8-04bb-8c54-3e4874ecc41f
 37 2d868a76-7f36-6e31-84d5-6b4280f65d61
 38 10810aa6-0673-34db-80ac-7cfea1af5a71
 39 c8a82cfb-ea69-3fcc-ac2b-f586f578b5cc
 40 668ff184-bf71-279d-bcf7-a6592a9e450c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3872085008103650016555544345721507806332. Exactly this sequence comes out of new Random(631).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 64 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs