A858DE45F56D9BC9 archive

201309121859 1ma25l

explained decrypted filler

seed 794

Metadata

Post ID
1ma25l
Title
201309121859 → 2013-09-12 18:59 on A858's clock
Posted (UTC)
2013-09-12 23:00:00
Timezone
UTC−4 · title 18:59 against posted 23:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309121859) = c15eae9ec665973266f1a80f6080980e (name+title)
GUIDs
32
Filler GUID seed
new Random(794).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
6 · predicted N = 32 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309121859 (name+title). Key = MD5(password) = c15eae9ec665973266f1a80f6080980e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 18ead99a-9a4d-4ef8-8d31-48783e17413d
  2 2263bcb6-d50b-78bf-a482-6d7ce48f973f
  3 fafdf928-9396-66d2-8a76-7c5a5caebff7
  4 d8dadf4c-a7ed-068c-b690-c94e3943a5da
  5 3ea81c23-79a2-68e6-b93a-453510bb8b0a
  6 ef13c69c-af19-3eb7-a213-0a822cfd2e4a
  7 200e60b1-655e-5692-bd23-560715667108
  8 ec7301be-3fb7-72cc-bb97-ef6ba177e878
  9 d35ade63-2ea9-132c-8e73-f2f875f15d9b
 10 eaca544b-e0dc-021f-b9f5-8b24afcfc1f8
 11 25abe10e-06af-29f1-80ab-b8f39233aed4
 12 9757d28d-5e49-3e67-b4e8-ede65956c9df
 13 64462178-39fd-457f-8aaa-258c2c070bb7
 14 dd56efa2-bcdf-40fc-9c5a-f04214c0111b
 15 beccf501-b610-60a2-8fc7-849e3683e39c
 16 07d9fbcd-c8d6-8dc4-8efe-9074a41c0c70
 17 8409f4db-10f4-5954-bdc8-a372681adf65
 18 653cb4e8-e2b3-20d5-a047-83fedf652a9b
 19 c05a51dc-512b-1d0e-ae07-dabb159dd31f
 20 f94fb2ba-1371-6542-bd67-13bdd4d379f0
 21 01965c0a-fddb-2d86-ad1b-f8cf762aabfb
 22 349175ac-aa96-5dd3-b3db-e29f5fa53c03
 23 ba00dcd8-27cb-1953-ad4e-b057542bd639
 24 ea304413-ba9e-38e5-bf98-c6ebce9322e4
 25 149b7841-50c8-4ef2-85d9-6c3dfea1baa6
 26 b8b63026-2428-159f-9811-d617b2b86308
 27 1d913c9a-adab-599e-8ec7-93a55d684aaa
 28 05348c04-a9d7-5bcf-9187-ceed725874f0
 29 239b267d-c936-7f32-9106-f2e218c0aa97
 30 c706572b-bb39-4fb0-bbc1-d8b5b4ec4be6
 31 ad5b9d87-4551-248b-aae6-b8f03e1580a5
 32 6e9a3791-0311-506c-8f6f-404492aa4f9d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 47606357102344685216251341557425. Exactly this sequence comes out of new Random(794).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 6 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs