A858DE45F56D9BC9 archive

201309132259 1mcv86

explained decrypted filler

seed 334

Metadata

Post ID
1mcv86
Title
201309132259 → 2013-09-13 22:59 on A858's clock
Posted (UTC)
2013-09-14 02:59:58
Timezone
UTC−4 · title 22:59 against posted 02:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309132259) = 65abb5d82f12a92ac636b00eff024cd9 (name+title)
GUIDs
36
Filler GUID seed
new Random(334).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
34 · predicted N = 36 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309132259 (name+title). Key = MD5(password) = 65abb5d82f12a92ac636b00eff024cd9, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 697998ac-e91b-1f6c-a349-1662bd75fb46
  2 82c9133e-6c0a-79dc-a82f-8ebebb8be025
  3 757e198f-72ed-2562-a2aa-13c7f1ea63f6
  4 f4ae00cf-87cf-716e-8062-153b2832e539
  5 7f4eb141-06ae-0d06-bbcf-ec4b274717b8
  6 60a6c72b-e5a8-370a-a0ab-0d9b26709ff3
  7 b776538c-f08b-58ab-9a53-912f7f308ffb
  8 0fa1b6a4-12d6-0030-9ea9-ef5a74932bf5
  9 6e9b41e8-b0a5-26cc-9aba-d2f934fba46e
 10 e2d4748c-7b47-3509-b7a4-b52009768e3e
 11 edf81557-90f6-30b0-a5de-f9f4c1519771
 12 084e7354-07a6-2cb0-b937-c76d065f6865
 13 7be4e570-48cd-2bfd-9770-695d6731be37
 14 445390cd-74b9-22b6-b1fb-f3ae5da4c4c6
 15 c8ef8fbf-61f5-6953-ba19-b7a553a2bd48
 16 33102fee-07eb-5559-b678-cab900f1ccba
 17 087f563a-4544-27f9-bd6d-ecfc1c91ef41
 18 06acfcb1-a726-02ad-9efb-ef4314706814
 19 1dc14136-0d73-65df-93d5-68b058bd9795
 20 b3b34e3e-6af9-5eee-96fd-0000b140e735
 21 9eb463ca-758e-152b-a201-7781c2cc7427
 22 521140e0-ff4f-7340-9b79-95687ac68c34
 23 723e1cbc-e7a7-364e-8118-3c8d1347d4c3
 24 433f98e4-b88c-62e3-b5d8-3f37f613cef7
 25 4f0fa028-95ab-3e6c-9635-13d8a2340d88
 26 4bd058be-fbe7-381a-b9aa-8f403a81daae
 27 d2125c37-d8c0-0f06-8043-fef39edcc319
 28 6c5bacc9-8ccf-5405-b3f8-0d702baf949d
 29 80cdcb8a-d8be-74e1-91cd-835dc67ce6bf
 30 a7226734-a11e-0f86-b6ec-6763ae05d8d1
 31 047e4d7c-ef88-42d8-abea-2133528259b1
 32 6750425f-cbed-39ec-a2a8-0ded0f4b91cf
 33 928124c3-c850-5e0c-9a00-333545dc6de5
 34 2bc14040-ce49-342a-b21a-272ccbd72f39
 35 b8c74e76-89b8-2d9f-ba92-eb3017426eab
 36 1007c5e1-8886-2495-bfa5-69222224eeab

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 172703502332226520651736330570435322. Exactly this sequence comes out of new Random(334).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 34 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs