A858DE45F56D9BC9 archive

201309070059 1lvkn3

explained decrypted filler

seed 664

Metadata

Post ID
1lvkn3
Title
201309070059 → 2013-09-07 00:59 on A858's clock
Posted (UTC)
2013-09-06 20:59:52
Timezone
UTC+4 · title 00:59 against posted 20:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309070059) = f9bfc2186939d8613f64b859a7ad03f3 (name+title)
GUIDs
32
Filler GUID seed
new Random(664).Next(9) ✓ verified
Run
Run 52 (seed 1,430,705,843) (seed)
Draw
56 · predicted N = 32 ✓
Machine boot
2013-08-14 07:34–10:34 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309070059 (name+title). Key = MD5(password) = f9bfc2186939d8613f64b859a7ad03f3, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 cd007b73-faa2-58a1-8a0c-d1d494b3ec56
  2 9517f5d6-df8e-547d-bcc8-9cb8585c78e6
  3 912e1d8d-0ca3-8719-87f2-685f44341fa5
  4 0cca0490-2a97-2e24-b881-816db0dbed07
  5 941b714d-8177-833a-9124-4a89eb128c30
  6 88091a95-7fb9-7513-b8c7-64f3f9c7905e
  7 f6de084a-7850-318f-aaf0-233e3f1bbb8c
  8 1e85af16-9fc5-5040-95f3-72029fc058fb
  9 4dd02041-b3db-1e4d-9c3e-10af73ca7aed
 10 b1945a9f-b626-115d-8b9e-5cf8a7472ff0
 11 a14d696c-cb1b-494b-8589-2cd36d8ad366
 12 c4aa2b9b-6cfa-7eb6-a64d-ca12eeeaa904
 13 621a7abb-1699-0b86-9dd6-c09571b128a8
 14 d927bc01-1fc8-8cab-999d-800d297e0fe7
 15 1ffc6f30-3b76-6792-9315-3b58ae5f5ca5
 16 69410e6c-b61b-69aa-9e64-2888afea0587
 17 b4e92101-ca08-8d18-b3cb-24354c7e4135
 18 a4728c04-bc2e-6e7a-9811-d9c952a4e26e
 19 ddb9cf97-f4bf-5bb4-8d41-2abfa1c11ce5
 20 48714c35-cb65-3c08-ade0-e313e6c657c9
 21 8d728d90-358e-0e95-b0c2-8c3eee4cabd4
 22 0314903f-0a15-67c7-9d55-3f2018a46728
 23 e6199783-0879-1db0-8b98-a4b2441df305
 24 f4727cd1-d53c-8e3b-aef9-8431003298da
 25 65ee3289-c516-6722-bd01-2aa0b501d9cd
 26 4a66c52d-bc8b-55f3-9169-0c39631522d7
 27 3ba31b60-6989-79ec-a09b-d93275032266
 28 52ec4b0e-ebfe-0e9d-aab8-278cba676fb9
 29 173eb411-096a-8efe-921b-093156faa9c0
 30 f7bf3684-ab45-7e37-a279-04277dcab7f7
 31 3725e54b-43d8-2ca1-a53d-ee871ac412fe
 32 de8150e2-c260-3514-8abf-4574d3af6915

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 55828735114708668653061865708723. Exactly this sequence comes out of new Random(664).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 56 of Run 52 (seed 1,430,705,843): new Random(1430705843), 4·Next(1,12) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-14 07:34–10:34).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs