A858DE45F56D9BC9 archive

201309160759 1mhuow

explained decrypted filler

seed 272

Metadata

Post ID
1mhuow
Title
201309160759 → 2013-09-16 07:59 on A858's clock
Posted (UTC)
2013-09-16 11:59:55
Timezone
UTC−4 · title 07:59 against posted 11:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309160759) = 3ceadf3b4741bab27dae0f39e4f28a0c (name+title)
GUIDs
40
Filler GUID seed
new Random(272).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
91 · predicted N = 40 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 2
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309160759 (name+title). Key = MD5(password) = 3ceadf3b4741bab27dae0f39e4f28a0c, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 4389197d-1607-7883-a2a9-3cdba7d1623c
  2 09bf9069-38c1-5f7c-aff8-605d1294b280
  3 21402503-6aa8-8175-b894-01ef372860cd
  4 c9eb5640-c382-502a-bc88-a25bebe0eda9
  5 0fc1bcd9-3fbb-0de5-9d60-22bccb7e4736
  6 46f646c6-e440-25f0-8cfb-346bceb090f9
  7 cf13a017-2cf8-679b-b7fc-5ea94e25a192
  8 e4934ae7-c660-837a-8aa1-535f0d365d01
  9 04ae948b-05ab-5508-8040-c21db1d45a6a
 10 70c88c3d-58e4-5a95-9d6c-c6e9124acb00
 11 afec2f5c-4aaf-67bb-81c9-e6565280b9f0
 12 6295afba-128d-726c-be52-f7bdfe8b5c92
 13 f60ab436-05ba-54e7-bc4d-d137dbadcdc6
 14 926c3bec-3900-842b-af96-dc4c2c9f894b
 15 f028eb79-006b-3eb8-a3a2-8422d5e87e27
 16 2a4d0aee-1d56-82aa-8d72-6192c16883dc
 17 5461066d-9bbf-1856-adbd-c181c663f77e
 18 903ebad4-70d1-5ccf-a547-cd5cbb755aab
 19 def3bc64-bde8-0317-9439-f672a654c2e2
 20 8e326d69-b58f-5923-af0d-b0b9f50c7f41
 21 b2dc9703-bc3a-8445-90d3-45f96ac42601
 22 a3d2ccb7-0f85-58f1-abbc-7c37d1fbbae0
 23 2421042f-a715-8d13-b3ef-0457f57b2451
 24 e977ab73-da34-063f-a4df-d83caf4065fd
 25 0b106214-c5ef-337c-bf6a-60d1df32b802
 26 6648363b-8c8c-4812-a7ac-3f091b825055
 27 4960f714-0abc-70f0-b944-8ea2c2e5b449
 28 c00c1691-52f2-1344-b385-506562cc0ad9
 29 bbfa47fe-0434-69c1-bae5-85932e22ff69
 30 4a529445-2941-1989-a59c-083d4c57f59e
 31 e8451f11-2116-5bd1-aa6a-79c1be092f4a
 32 437c687c-8e17-07cf-9641-555ff322383d
 33 becac6ce-9607-6d98-94af-d536a7972055
 34 19451d13-b7a2-74d3-8287-d7914cef5c9c
 35 99e6e6f3-8719-553e-9c54-02452073587b
 36 52b9252b-c4ec-4dfa-92c2-05d89cfc01d0
 37 c06a0202-450f-3045-ae1d-221502ad2f7b
 38 cee5369b-d794-6f06-b872-4109ec35fbe7
 39 32df2200-320a-85c3-bfc4-62a915979914
 40 b90a3040-ebdd-354f-87ac-e9bd3b2e49d1

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7585026855675838150585803471615067543683. Exactly this sequence comes out of new Random(272).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 91 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs