A858DE45F56D9BC9 archive

201309141459 1me1ve

explained decrypted filler

seed 412

Metadata

Post ID
1me1ve
Title
201309141459 → 2013-09-14 14:59 on A858's clock
Posted (UTC)
2013-09-14 18:59:57
Timezone
UTC−4 · title 14:59 against posted 18:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309141459) = 3bbcc2a50c483c2f1f3b73771aef8bb4 (name+title)
GUIDs
32
Filler GUID seed
new Random(412).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
50 · predicted N = 32 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309141459 (name+title). Key = MD5(password) = 3bbcc2a50c483c2f1f3b73771aef8bb4, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 03e01a53-cb4f-832c-9ea3-431a3b1bd862
  2 9a5de820-ab62-61b4-90a6-47d969f32a71
  3 f0a0ba08-2cd0-648f-808c-776b06371d1b
  4 3ea6d8ac-cf30-4b30-b05b-33b158da19fb
  5 7a830116-916d-1fcc-9585-3d323cb1ff75
  6 8c45f2d4-fab3-551c-937b-3ea25399575e
  7 f3ef6b0f-4f93-46ae-b5ed-174cb6f5ed71
  8 8de3362b-e2a4-1b5a-9b88-6a6bb7d02613
  9 05a6aa80-77fb-80b6-9042-1cb84fcc1dec
 10 f6a44bdc-58e3-1939-8f2f-9544a0071154
 11 f9006327-9012-7970-b136-bd9ec32b90d2
 12 db25a0bc-cad1-18b6-a1f3-db4850ef19bf
 13 7b2b9a6f-3492-79e2-8bcb-0923384c5e47
 14 52d9a0b7-acd2-7d1e-bedd-ab7efe0c7c34
 15 1a67f527-43d3-3c87-94d7-b4355b5ae305
 16 1ad83a5c-4140-2de6-b011-834f94de27d9
 17 5ca92bbd-0616-0ee4-80a2-afb0c450fa82
 18 6231dba2-f182-31a9-b11a-98f475fdf0b0
 19 08cced32-2d2b-796f-beb0-abd799d43c1f
 20 a83c0b91-4765-7903-9249-d99079753398
 21 615fa40f-d21c-519f-9ed9-7df9d39f1a5d
 22 62441d35-3ff4-85c0-8029-839fd38d5f0e
 23 c2c622bb-80dd-5661-95d5-cb8c9c1d296c
 24 afb0341a-0723-8d22-8eff-3227fe0b65c3
 25 fbb66715-1cb5-0bf6-ba46-7e0e09fdee6d
 26 f385e815-f891-4671-a874-c86064c61454
 27 c058c589-1eb3-165a-88b8-1a6c54c3b64b
 28 292aeb83-b8f2-8058-93ed-0e3ff246f8e6
 29 0d3c6683-b5dc-3cfa-8667-cf4adabb09b5
 30 d97a7376-7605-8543-85ab-f1f6bda59df2
 31 3991bc8e-4e1b-291e-bd32-2cdee46c1420
 32 e558abdc-9268-86e7-a0c7-e9ab349cbd0f

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 86641541817177320377585804183828. Exactly this sequence comes out of new Random(412).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 50 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs