A858DE45F56D9BC9 archive

201308081206 1jy23c

explained decrypted filler

seed 90

Metadata

Post ID
1jy23c
Title
201308081206 → 2013-08-08 12:06 on A858's clock
Posted (UTC)
2013-08-08 09:06:57
Timezone
UTC+3 · title 12:06 against posted 09:06 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308081206) = 41c38311af84901eb12dcd300d7b245f (name+title)
GUIDs
36
Filler GUID seed
new Random(90).Next(9) ✓ verified
Run
Run 50 (seed 2,278,890) (seed)
Draw
20 · predicted N = 36 ✓
Machine boot
2013-08-05 20:29–23:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308081206 (name+title). Key = MD5(password) = 41c38311af84901eb12dcd300d7b245f, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 32d3e98d-7150-6e93-9f2f-02def2f176cc
  2 a1e9fd64-7419-2426-afd7-746d11121c5d
  3 ed0f8217-4457-60e8-88bf-5df079aa7cdb
  4 610a07fa-a530-6aa4-87ce-ffd8ea89d358
  5 0b45f77f-b620-7880-87b6-901a09ee6d6c
  6 9d6145ef-4fd3-144e-8d35-49419d405056
  7 9d2aa2fd-0b73-2a17-aa3e-7d8ade9e758a
  8 a105473b-c904-5f4e-8e26-79209c1e9502
  9 2b4a8e0a-0064-10ad-b040-a8b361663dce
 10 9f88c583-41bb-4b6f-8fec-7346b2a19271
 11 b5cdb0e2-847a-5571-8061-683a48420619
 12 2b7a9882-bde8-6d40-a1da-f7dd17e70c9b
 13 f4c20f76-8ff5-4c00-985e-fdb47d77855a
 14 2f033af3-ba8b-223d-b4bd-1295e34d75b1
 15 998fcd8c-893a-838f-b5da-8af0e591025f
 16 0c588604-e8fe-2b8d-9551-5b500ed44118
 17 f21fb866-6e34-69e4-9306-69a2ddd3d6d2
 18 82acac9b-809b-7ed8-957b-b99a5aaec22d
 19 f3c5e5a6-72c9-1be8-b0bc-8adf38bff3c4
 20 fa9cc632-64b2-179f-a76e-830a7afd54e9
 21 b0e5d1cf-cf9e-6517-9fc9-894a18b4e6ea
 22 0c9a4669-da9a-8795-8390-2d15c2fd184a
 23 4e181784-3854-1608-bb39-b05632a68adc
 24 8d4fb156-1d1a-4d09-a081-d4e019aec686
 25 d0f87f1b-4720-478d-a468-7c605ccbf293
 26 21a39c3a-f89d-3f80-ac85-77adff40929b
 27 afb0a013-4aa0-2408-8e4b-dab82f4fc549
 28 514b1e1f-e2ec-4196-87c7-185d35870575
 29 5da078e9-b746-3f97-aa7b-4b2f58eb5e0e
 30 1fc46d37-850d-57d3-b312-916ca8599142
 31 bf6f8265-8b8f-3744-8451-ea0e0c1a98c7
 32 b9584f37-aa46-1c53-8245-44b5152a1f52
 33 1f6b2b78-fe0d-43cf-b217-17c57edca1cf
 34 cda42ecc-229b-2985-bcbf-665bbce2fd12
 35 334a848a-cefa-0183-a95b-2dd73e7a63b0
 36 af853dc1-6f6e-5f4e-9ec2-7e775eb80841

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 626671251456428267116814432435314205. Exactly this sequence comes out of new Random(90).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 20 of Run 50 (seed 2,278,890): new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs