A858DE45F56D9BC9 archive

201308241729 1l01cd

explained decrypted filler

seed 725

Metadata

Post ID
1l01cd
Title
201308241729 → 2013-08-24 17:29 on A858's clock
Posted (UTC)
2013-08-24 12:59:58
Timezone
UTC+4:30 · title 17:29 against posted 12:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308241729) = c49b120ccd034a3f4e8ee31dd581b5f2 (name+title)
GUIDs
40
Filler GUID seed
new Random(725).Next(9) ✓ verified
Run
Run 51 (seed 714,271,718) (seed)
Draw
5 · predicted N = 40 ✓
Machine boot
2013-08-13 23:35–10:35 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
7 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308241729 (name+title). Key = MD5(password) = c49b120ccd034a3f4e8ee31dd581b5f2, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e3d86c6f-41d1-4b3f-8499-85a0c5e8882e
  2 373e3dd4-e56d-47a3-a310-560ed5c49496
  3 20dbf199-2464-4ac0-bf18-6b1f1f64f7e7
  4 9d6699a8-3528-2513-8ac0-5df27921d555
  5 203368aa-f430-4b58-b0da-ce716218d7ed
  6 522fa8de-1f6b-11ab-bf4f-b81522a753eb
  7 9cac5122-77ee-6810-b987-676f7de806fa
  8 3e5dd68b-5c00-1cf7-8dbd-e5a9c53470fc
  9 03a3e92e-1d72-6f7f-86e9-f80ebf7c06db
 10 387ca21e-a3b6-5ae9-985b-1869a95625d5
 11 a62e7445-6a89-3722-b377-65b105070b75
 12 25f80922-f61a-4f00-9768-e895c58f38c2
 13 a8971159-0e9d-0a67-b0b7-d11bb51acc11
 14 a14baa3a-3024-568f-b948-71439fb6a02e
 15 a7442030-b451-435f-946d-a3731f2e6125
 16 f32ac935-a15c-7d82-b630-7dd852a49c39
 17 f644c2ae-f8d3-5e53-8952-2ebf05f058a1
 18 79526700-0df3-4f83-99b2-f6c0f8fd9ed2
 19 2d1462a4-4920-275f-936e-a10274211e9e
 20 35f26262-eaf5-0ffb-b370-264d0abc7321
 21 2a3e04e1-5bd3-1925-a6a5-8a5ad482c85f
 22 69ccd459-accd-63c3-acc6-9a63427c8a46
 23 4f1ae221-ac01-4ecc-99c0-74fbda3397b1
 24 744fbdea-5651-2c4a-a626-a82d4fab94d1
 25 8b20fd22-2f19-6f09-b789-e5131cb0d61c
 26 e39ca2e9-ea14-7eb5-8108-f9d1cd96a720
 27 36ee6d4e-5287-2085-95b8-b083bb1fa205
 28 2ba3cd9a-5704-893b-9781-e21814d15557
 29 cc368cbb-d96f-7842-9e06-ae53d304ee5b
 30 2b1c5106-3a84-849b-93bf-424d555b6607
 31 67140826-7246-7d82-ae91-8871886f1933
 32 688f2416-3355-30ed-99a9-de9602df5fee
 33 44770fcf-e15d-7aa9-8746-cd12b6292057
 34 f4e85c89-2d1c-16d0-a84a-7e3ba3365c4a
 35 c4660f52-18e0-749e-a396-b79555783b72
 36 23c7a548-0d82-1f29-b102-fb02401d5d9c
 37 7eee0820-d234-5067-aab5-70e96895706b
 38 35489f28-013b-4190-9c4b-17d066c1956b
 39 8fb2b6fb-fc65-464f-8bd7-128e3dc2c2a1
 40 ea4d38cd-7d1e-5b6c-b3db-18b0304ddc3c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4442416165340547542016426728787371715445. Exactly this sequence comes out of new Random(725).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 5 of Run 51 (seed 714,271,718): new Random(714271718), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-13 23:35–10:35).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs