A858DE45F56D9BC9 archive

201309100359 1m2iug

explained decrypted filler

seed 231

Metadata

Post ID
1m2iug
Title
201309100359 → 2013-09-10 03:59 on A858's clock
Posted (UTC)
2013-09-09 23:59:48
Timezone
UTC+4 · title 03:59 against posted 23:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,552 hex characters · 776 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309100359) = 10ce071565f414244032a71ed205048d (name+title)
GUIDs
24
Filler GUID seed
new Random(231).Next(9) ✓ verified
Run
Run 52 (seed 1,430,705,843) (seed)
Draw
81 · predicted N = 24 ✓
Machine boot
2013-08-14 07:34–10:34 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,552 hex characters = 776 bytes = 97 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309100359 (name+title). Key = MD5(password) = 10ce071565f414244032a71ed205048d, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 24 GUIDs as hex (shown below).

Decrypted: GUID list

  1 fca024d6-1a58-3b17-b2c0-1b3412effd5e
  2 511df7b4-c281-51c9-adc3-0f32f8d8236e
  3 fc50045a-340f-2828-83e6-a55a9b043e56
  4 01476eb8-878b-7ab6-804e-e1db05c6563c
  5 6ebbc677-cfaa-44c5-a201-85200c8d3069
  6 89ccebe4-d949-3401-9db3-72aaa24c2658
  7 cbc332b2-86c0-327b-a954-80f7688e49f0
  8 172bc56e-12ae-27de-8ced-89188bbb3531
  9 ccc07eb6-494b-54ad-87d0-4e7b9c9bff4c
 10 b50ce18c-5983-4507-87d0-b582e75a3b89
 11 848cb123-03c0-40bd-86ba-444e5f399033
 12 640408d9-83d7-75b5-aa70-4236129c6ee0
 13 134d2403-64bb-3dc7-aeba-4cca92bab10d
 14 6c4cf700-c3f1-5bbc-b6f8-39e8dd30d96e
 15 2467be6a-16fc-6eda-b9ef-3d7dd9262f20
 16 b23fe83d-a185-281e-b750-d6ebef9c3c6e
 17 7f8a4092-ed9f-8e95-8d08-01bc0bd113ce
 18 cfa3dbbc-cc83-1e00-960b-1d3cfca3bc3b
 19 f949a500-7db2-8464-b52b-e333b9e31f5b
 20 87ed1e34-4929-68e8-9683-5eeecb3b3b6b
 21 028c83f1-ccd3-4957-af82-4eaa7369cade
 22 7d3d4061-7b48-4a87-93e4-2c4183c4e8cf
 23 223274c2-e782-0d6a-ad83-a580dc44b04a
 24 8e8a0a4f-c2b9-62ac-ab6d-cf74383948f4

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 352743325447356281864406. Exactly this sequence comes out of new Random(231).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 81 of Run 52 (seed 1,430,705,843): new Random(1430705843), 4·Next(1,12) per post. The RNG predicts N = 24; the post has N = 24 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-14 07:34–10:34).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs