A858DE45F56D9BC9 archive

201307300300 1jagne

explained decrypted filler

seed 559

Metadata

Post ID
1jagne
Title
201307300300 → 2013-07-30 03:00 on A858's clock
Posted (UTC)
2013-07-29 18:00:57
Timezone
UTC+9 · title 03:00 against posted 18:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307300300) = aef38dac79b041cf8d20650193f56916 (name+title)
GUIDs
32
Filler GUID seed
new Random(559).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
124 · predicted N = 32 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
14 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307300300 (name+title). Key = MD5(password) = aef38dac79b041cf8d20650193f56916, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 330d2eab-937c-6db5-bd71-72c155cbd50a
  2 255902be-f49c-70a0-89a6-e59ba08364c1
  3 49ed3e8d-f384-4648-99e9-bd6edc3b7523
  4 872ef9bb-0913-7ef7-8df6-dd9804492bf2
  5 f74d187c-a178-5f34-a2b6-19513f72658c
  6 7f0f13d5-085e-0166-99c3-bb6db516e10f
  7 731ace9e-238d-3624-ae8c-3aafd5115a76
  8 29372414-fb5e-7a8b-b4ac-3f7c16d484f6
  9 53db4fc9-2f6c-1c44-817f-b1d4c47b0107
 10 b7e34ed2-9d43-34db-b3f0-db8b9085ea52
 11 a2992c08-5a58-1832-92da-ac4aea7595bf
 12 ac7bf723-e25b-7b2f-88ee-98f1d5fa451a
 13 a0579599-b6c5-8e43-b81c-8526c25688cb
 14 7a452b5d-d595-2532-bef8-757dd736f489
 15 8f0f4f17-84e2-217e-a591-d1c247d3c8dc
 16 af09df6a-5e14-1c92-a72a-21ab160b8d08
 17 a089b5ca-9b1e-7046-8140-7842bc99eb0c
 18 9701ba79-a8ca-5557-bfb8-96fd45af4ca5
 19 30dd632f-6ac0-7b52-ad87-3ca73d066cbd
 20 65075472-f1a1-610b-8dea-34b1eeeaa77f
 21 1ac87eda-54c4-0d4b-9885-5f7b7c8b2387
 22 0d6ad7b6-05f8-8e1d-9e90-5dcaf874fb25
 23 68aa84e5-71c2-4ec2-b096-8ac805c97457
 24 31a861eb-0faf-2b64-92a5-2c9aa03eebe3
 25 9a46c2a5-2193-41a3-8cfa-30e465f97a55
 26 5dd8c915-9e5c-0d16-a1c8-e27079294bb2
 27 2b419871-e05d-4f45-a3df-05e46ef198ab
 28 afafc445-001f-0646-b131-2208fcc51bf6
 29 c4359dc5-8ac3-868f-b9ab-431cf096ea27
 30 3b1201a3-30b9-2b73-9354-75c99ae64781
 31 056a6016-928f-5018-ae0a-18d82a8c3cfa
 32 7cb85a01-3925-6e14-822f-d2ed7c963440

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 67475037131782217576084240408256. Exactly this sequence comes out of new Random(559).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 124 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs