A858DE45F56D9BC9 archive

201307291500 1j9f09

explained decrypted filler

seed 234

Metadata

Post ID
1j9f09
Title
201307291500 → 2013-07-29 15:00 on A858's clock
Posted (UTC)
2013-07-29 06:00:57
Timezone
UTC+9 · title 15:00 against posted 06:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307291500) = 2152dd576f98799d11ed2db50a1abbef (name+title)
GUIDs
32
Filler GUID seed
new Random(234).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
120 · predicted N = 32 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307291500 (name+title). Key = MD5(password) = 2152dd576f98799d11ed2db50a1abbef, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3c641434-f524-8966-ba1b-6250fb08b254
  2 bf060ff7-16a2-46e5-9bdf-4e720557fa40
  3 564a7d47-dbec-2cf2-87ae-4e4548a1e789
  4 90b46cfe-23c4-46e6-b372-4ba8076ddb1f
  5 9e5fc3cf-5574-7045-8a3e-a4df19441d88
  6 996ee228-44f2-0230-8ace-b3ecf2f1ae56
  7 96df11cd-c447-6669-8a71-9951bf53ba9b
  8 bab9847b-7a14-7d75-a1a3-2207ffeeaf41
  9 c4404015-786c-87c4-bcec-1f4957f2340e
 10 77515873-db29-5d9f-81e9-7f81398ec138
 11 bd6f23d7-bb4a-6189-9527-d6765c616d13
 12 3274b71b-f3c0-1a03-ac3f-559f7af7151f
 13 80d793e8-fbc1-4b75-b35b-43fdbc7a0b18
 14 31e94c9b-c99e-1795-aa20-e5580d741c03
 15 1893677e-8aea-682c-8d6c-0e518b4e54e7
 16 017cb663-f1b8-16e9-88a4-357b0b2884b7
 17 2b415a93-4862-22ad-807d-07f14aeac207
 18 dd84da5c-7da6-0878-9533-be0d376d3722
 19 2ae6a184-2ae4-0ee8-af5c-b2eff62b0f5d
 20 519054e5-90b2-8c40-9024-b2007267720a
 21 3169c46b-9c48-84fc-8703-4b9f4b89ddf0
 22 71b9f92b-3ef9-2ac2-ae55-ad0dafb05867
 23 e32d3305-732d-4703-a14c-0f5dfbac90f6
 24 403c1d5a-6e76-7690-8e19-4d05adc8369e
 25 69efff56-582c-5ac0-b1f5-eddfaa4e61c1
 26 e064814c-833b-0a86-abd2-94a3c477497f
 27 6a76c16f-5815-1e21-b590-ebe8f3b72f39
 28 8269215e-5455-612e-a79b-784e5918de59
 29 99cf4397-1fe8-10c6-ae1a-7b4b4d6e12d3
 30 a7a640ff-29f4-4476-a5a8-884a936c652d
 31 700dde86-070b-5a67-a594-bbcd52a0dcfc
 32 405f59d4-6308-0880-9da2-3438455f813a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 84247067856141612008824750161450. Exactly this sequence comes out of new Random(234).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 120 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs