A858DE45F56D9BC9 archive

201308122106 1k7yhh

explained decrypted filler

seed 198

Metadata

Post ID
1k7yhh
Title
201308122106 → 2013-08-12 21:06 on A858's clock
Posted (UTC)
2013-08-12 18:06:52
Timezone
UTC+3 · title 21:06 against posted 18:06 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308122106) = 854623cb74faed46c5675295414c783f (name+title)
GUIDs
40
Filler GUID seed
new Random(198).Next(9) ✓ verified
Run
Run 50 (seed 2,278,890) (seed)
Draw
55 · predicted N = 40 ✓
Machine boot
2013-08-05 20:29–23:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308122106 (name+title). Key = MD5(password) = 854623cb74faed46c5675295414c783f, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5a76ba19-3007-1428-befe-b8d4625f85ba
  2 13662183-0770-80e4-9735-93e97ede6f84
  3 1adf7f58-f6bd-1e45-9de7-3e91a5ac0a91
  4 65c6e376-a301-7b19-bb2a-51dbace4fa96
  5 84abe6c2-04db-5c74-9812-d2134ed6409c
  6 057fb61c-b1fa-5174-a83a-a34ca53419e6
  7 748dfa28-4849-5242-b43e-36d7244ecf7f
  8 7e0c3628-fb64-6e98-b1e5-91259f89a746
  9 518beb14-bfe9-4384-a4c4-de1015c6ebef
 10 d9d8a98b-7499-28ec-a30b-bd1eff2218a8
 11 86dc7fe6-948e-19fa-855e-aaa48f273a4b
 12 fa915b5b-7c52-0320-ba83-32a309acec2d
 13 ca4c900e-cfbf-60e3-9a68-6929d6024e82
 14 5bbef3f0-a32e-4bcf-9a11-36c9fb14d48e
 15 727152bc-cca1-5fdb-97c7-55d2d1498693
 16 0d73deac-a5af-6dd4-9e05-ae2df14b1de7
 17 48a8cb49-c26f-043c-8895-a471ec0de647
 18 e9c3cb14-4a77-6561-8383-19970ae32719
 19 1d59771e-3cba-0e7c-96e0-c4aaac9320ee
 20 d1875787-dfea-8a8b-808c-f7ba64a15d4b
 21 d020d0e8-c838-1e16-bba9-92ead9d40021
 22 a39e5632-2c29-38cb-ae89-7d1f83bc4364
 23 200ba167-5ed5-4a95-af88-67fc18c34e2a
 24 949de6d2-386a-1413-8960-ae8cbf2b3727
 25 2442b4f3-559a-028c-b9ac-ea6f91adf68e
 26 71879534-2d59-77df-a10f-fadda97dafc2
 27 1d760b90-12fd-112a-ad44-25f20176c616
 28 b3e3344b-9a1b-3e5c-86b4-236511fab2af
 29 3730f362-1a88-2afe-a6d4-0c63791fbc1d
 30 6c8d434b-f727-46e8-a754-918c64d473e5
 31 7964eda8-e3bb-2ec6-9567-74d5cadef696
 32 1e36cff4-a6e7-5679-a853-74e6db21db22
 33 77dbe306-9307-87e7-9db6-e5d94a4aa4da
 34 a355b59b-e461-8094-9340-0706a30549f6
 35 9c87e31b-ec17-72c8-8fee-11c6ea654c9d
 36 d87ecbd8-c5fd-3d72-9b91-6bf8427734b8
 37 44c24152-4251-034d-aea8-96fdcbe1eac3
 38 1a6a6309-021a-2950-831e-8f7827af8491
 39 557a0581-0ba8-210c-a7ce-5db7a3aa4218
 40 981aeb6e-2186-35a8-b757-be6e9ddadb63

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1817555642106456060813410713242588730223. Exactly this sequence comes out of new Random(198).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 55 of Run 50 (seed 2,278,890): new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs