A858DE45F56D9BC9 archive

201309061559 1lujk9

explained decrypted filler

seed 178

Metadata

Post ID
1lujk9
Title
201309061559 → 2013-09-06 15:59 on A858's clock
Posted (UTC)
2013-09-06 11:59:52
Timezone
UTC+4 · title 15:59 against posted 11:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309061559) = 2a9aa7a42d680015531a29c45aff6ac5 (name+title)
GUIDs
40
Filler GUID seed
new Random(178).Next(9) ✓ verified
Run
Run 52 (seed 1,430,705,843) (seed)
Draw
53 · predicted N = 40 ✓
Machine boot
2013-08-14 07:34–10:34 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309061559 (name+title). Key = MD5(password) = 2a9aa7a42d680015531a29c45aff6ac5, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3a91b933-9c86-67a6-b71d-3e6dafa78854
  2 4def392d-f609-010e-a919-a23a311f7e4b
  3 40536e5c-6a89-1afc-af9f-6dc5792621b6
  4 1ed6ec32-c19f-4106-9436-11bf1cfba1e3
  5 59a04e7d-b46d-56af-9237-adf68a6413c8
  6 a4165e41-f989-15c5-a335-f9613743ff7b
  7 14b067fe-e40d-575a-b59c-a9fa119dee40
  8 6d925a67-ac6c-6161-a6c9-6d51c9370ea9
  9 ecd46f0a-a2d4-8bd7-a7f2-37eb2c110b80
 10 0196f5b1-5040-813b-b039-70caf54ac612
 11 4be7bdbe-de00-3e6f-a6ec-cac944a02ae2
 12 21ce74d1-af75-38bc-b6ea-318311e2115e
 13 1fc0bea6-37ad-873e-bcac-5883a3c8d8d7
 14 b9dd71fa-9ec8-00dc-b2f5-8b4309726413
 15 aa2414e5-96ce-57b5-b392-8c1fd0c6a248
 16 92a6a241-706c-13c9-bd15-efcaf0730b1a
 17 a5b2ad47-3f5f-69ed-ad55-4038c965b3e1
 18 8ac220af-da2b-325e-a7ba-cf41e3984247
 19 f15cc60c-349d-41dc-ad3f-ef4152c60b29
 20 b59ba8bf-53b5-2813-a855-eb918937db52
 21 f02a04b2-a87b-4dbd-a53a-39f44c5a4927
 22 6048cd9d-6743-43ad-a376-71fc12b11b63
 23 cd522b2c-09ed-0f35-9f6a-685e150f4692
 24 a72f7eaa-2ead-1e60-8e81-e12edb82c15f
 25 733c2e84-af76-18f1-babd-125bf23cec45
 26 12502893-fd71-077c-9c03-11a6bf55934d
 27 0618b0c5-399b-8853-8402-48c4765dcaf2
 28 789eeeac-e5c7-80e8-8862-b770dfa447c1
 29 a5b7d034-2d1e-6870-b62b-ef55c16ee388
 30 17908524-405b-3f07-9a97-5bbca046aacf
 31 fe986823-215c-8088-910f-d7e155e95212
 32 9fae3e7e-05be-3849-97b0-2d0c3c19bab9
 33 55172c42-7f30-7b93-ae0a-4b5e72d641a9
 34 cfef8681-a948-4266-8874-cfc274eb943e
 35 702d3213-8ac6-7b93-968b-d145aeb206e3
 36 71db85a4-b4ad-42d3-b78e-01f4f12968a8
 37 f791242b-7393-4180-bdc9-a6680acac38a
 38 4ad0fc27-2dce-60c7-a0c9-422ef990a834
 39 457dd99f-74ac-7f01-8cde-489498834ab1
 40 cb76d9f8-1784-01c7-89a7-49e8fd034134

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6014515688338051634244011088638374744670. Exactly this sequence comes out of new Random(178).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 53 of Run 52 (seed 1,430,705,843): new Random(1430705843), 4·Next(1,12) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-14 07:34–10:34).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs