A858DE45F56D9BC9 archive

201307290900 1j8scv

explained decrypted filler

seed 549

Metadata

Post ID
1j8scv
Title
201307290900 → 2013-07-29 09:00 on A858's clock
Posted (UTC)
2013-07-29 00:00:57
Timezone
UTC+9 · title 09:00 against posted 00:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307290900) = 223ce58e7956de36db5c8d40ae4c86a9 (name+title)
GUIDs
32
Filler GUID seed
new Random(549).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
118 · predicted N = 32 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
13 · 17
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307290900 (name+title). Key = MD5(password) = 223ce58e7956de36db5c8d40ae4c86a9, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 4cd4c85d-23a5-4fe7-a8bb-7096265410a8
  2 40f24d14-bec8-86fb-bb2a-0757de3b2086
  3 f50523e9-8080-4c3c-8787-4a023da10a9e
  4 5768c1c3-b0c7-6a89-9ac7-26318c3d1444
  5 e30fe384-cfdb-062f-9e76-95d4331c322d
  6 a99d53f9-d119-2ae8-9ec9-a0f19cbd1278
  7 e6509014-9e42-8140-879e-6244a4f2d566
  8 fecff7c0-bb70-7f0d-886b-aeb49fbfa4ad
  9 2b4766f9-e114-88bf-b38a-c972be0847ea
 10 067fd16e-dba8-64f8-9d4e-e298fad5c478
 11 9c1d89ba-cce9-6bce-b0c5-72974baf5795
 12 4a3787de-f983-07f5-9205-a37ece700866
 13 6bde874c-29d7-0840-a9cc-e59bf4285a79
 14 289e881f-c1cd-0cd9-bfc6-b43474441d55
 15 5511aa91-f57b-2df7-82fe-ae3f37816d73
 16 5922f4e5-cb01-8a6b-a160-d764ea45fc9c
 17 2ca1a09d-630b-5646-b27a-9793719fb358
 18 3db901e6-e8f1-33cb-bc75-84d32637fea3
 19 aa31a277-aa52-4eb9-8e1b-915abc5eaf4e
 20 603409df-4a23-8db0-b73e-b9d0e77f9793
 21 fcbea2fe-8a10-6386-b04f-a8c79d6b83df
 22 56ee6f52-9c57-47fe-a8e6-fcdde388e989
 23 3c6a0de8-ec65-618a-a7b2-efb304f3202a
 24 9b99a9bc-749f-7b3d-b349-54a6494850ed
 25 9ca7d7e0-48a5-4641-98ba-2376542d7de8
 26 568107ea-d496-5e31-94ec-96d1dc3d8c14
 27 12e1de4a-1651-81f2-a1fe-1c7517f3c5db
 28 83de35aa-2d95-76be-beb8-7384dcfe5681
 29 5558bc8f-cd11-1a13-a7ce-7ccaf91410a8
 30 7d7e4978-536d-2504-837e-f2691415a384
 31 f0e12b9d-5c7a-70df-8c1a-5aa68489f2c8
 32 5bb04ea6-cfe5-0b97-acc7-204d05c44af8

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 48460287866000285348646745871270. Exactly this sequence comes out of new Random(549).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 118 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs