A858DE45F56D9BC9 archive

201307280000 1j5uhi

explained decrypted filler

seed 205

Metadata

Post ID
1j5uhi
Title
201307280000 → 2013-07-28 00:00 on A858's clock
Posted (UTC)
2013-07-27 15:00:59
Timezone
UTC+9 · title 00:00 against posted 15:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307280000) = 76b1893c371083aced37482df16ceafb (name+title)
GUIDs
32
Filler GUID seed
new Random(205).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
107 · predicted N = 32 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
7 · 2
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307280000 (name+title). Key = MD5(password) = 76b1893c371083aced37482df16ceafb, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 349eb2d4-f005-7ae6-b0d3-30499d9dcce8
  2 1937c680-8f27-8687-84d8-20729e62cbf4
  3 04a7dce9-169a-0369-bc25-aadade966f19
  4 a30b648b-1ed2-21af-b2d4-9888883131bb
  5 042e78b5-8768-6d60-ae1a-e12b7fa18414
  6 f22b1e0e-af92-6b61-8083-d85d1b8af16d
  7 f0eb251f-f288-6487-b3dc-695631b15d35
  8 66371010-0b90-2b97-a548-c670823931b8
  9 d0b81dbb-91de-32d0-85af-de7828eaca24
 10 b355e9a9-8b6b-7cd8-8cf8-e6b836cf2180
 11 84a95ffa-7d30-24c2-b70d-8399b50c8e2b
 12 c23d3fcb-5d36-4070-81c9-70e6e49e25e5
 13 3fab2f07-177c-5d4d-a02f-78c5ab41b3b9
 14 446f7df0-e89d-168c-b4c0-1cd9305e0807
 15 a4b9990b-9eda-40c4-9239-388dc1ce142e
 16 48c7302f-0366-01ed-bba2-c5a8397ce167
 17 d31dea4c-cf33-0b79-9b9c-826a00c91d09
 18 155ef17d-cf74-0fff-bf20-a97e5ae1acf2
 19 94ec8604-046b-24ca-9bf4-a0ae54b4932e
 20 89cad526-8a7e-690f-b950-2d8c8774d36d
 21 dc5bf217-629f-09ce-baeb-ee56f596173b
 22 5d8afde5-5c44-1ec2-9de0-d0f028506552
 23 240cfd8d-a775-599a-9d41-f3155185a094
 24 667cc4d3-f631-5507-b89e-b0fa8809cf0c
 25 14a797a7-98b7-7df2-a5d0-f6a221b7e7ff
 26 c7b4bf38-4022-3dc7-9551-dd3ea1828471
 27 0eb7e2db-72c5-1b5c-9d0c-996f7a60b107
 28 932f7c80-2157-60be-82cd-51ff30988aca
 29 85afaeca-57d8-1ece-b61e-34cdc0a4b9ff
 30 768002c9-abe3-1aa3-9f8b-116b64732d74
 31 759a0632-1be4-7881-90aa-20211fa51936
 32 72482de1-2045-4965-acc9-acc8f78e66e8

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 78026662372451400026015573161174. Exactly this sequence comes out of new Random(205).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 107 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs