A858DE45F56D9BC9 archive

201309180032 1mmfta

explained decrypted filler

seed 342

Metadata

Post ID
1mmfta
Title
201309180032 → 2013-09-18 00:32 on A858's clock
Posted (UTC)
2013-09-18 04:32:58
Timezone
UTC−4 · title 00:32 against posted 04:32 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309180032) = bafec0817e630b41119d2448a1dcfbcb (name+title)
GUIDs
32
Filler GUID seed
new Random(342).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
107 · predicted N = 32 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 3
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309180032 (name+title). Key = MD5(password) = bafec0817e630b41119d2448a1dcfbcb, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ac5bca46-39c5-387e-b8d5-265ea916cd36
  2 68d1ab8b-3b97-1b3a-9d63-59807b8d9380
  3 3f73aad6-f7cb-702a-a9b9-f76f8092342e
  4 0797bf42-4f72-5ebf-ac5d-b346db096d65
  5 8006807b-f79c-5990-a881-b5e36fa80c33
  6 76fb1df9-a519-31ba-8022-477026db909a
  7 09df2223-858f-1d80-8634-9888ef5ce199
  8 0b0103f2-b910-04ef-8ead-059164b1caa8
  9 44058ff2-7d4e-23b2-8adc-e95ccfca86ac
 10 2eb637a7-015d-3f3c-af38-afd5e7e88ca3
 11 e8f9f0ab-ee6e-244a-aa5f-a37ced1e9557
 12 c5d6b805-d807-4c45-be11-afad0862c396
 13 fe652e16-6879-63d7-9504-9ecfeffa58a2
 14 baec9273-4b03-3c73-83d6-18ecb567ddc0
 15 568333e4-81ca-3c65-ab3e-beebbbde9ce4
 16 d04af710-7032-5339-b936-946e9a464213
 17 5e7e2faa-dd89-5e4d-b52b-5662ac232f24
 18 deb0d472-c0c3-028d-be00-f01091e745f3
 19 8916db97-2156-8fb4-8887-d104a3490d0f
 20 72bdd426-f68d-636a-8365-ac661848ed03
 21 d9c49753-7d1f-21ae-9417-e4802a87d2e5
 22 07aaee90-805b-6690-b9de-776aaa97265c
 23 e4d6eb7f-e75c-7621-8020-2e2bcfb3cc58
 24 bfea910a-1f44-4c0f-b8ae-b7bb187559bf
 25 eab0d24c-4a99-1455-89ef-f0dfe094fc37
 26 c5a1c2b7-447e-4cad-8e64-f8b476599b80
 27 718503de-6355-8293-9d2c-4ec01245f2de
 28 76846c17-19d4-542e-a006-e1f8ada7ee3b
 29 2e8c7167-c947-0155-ace2-31edc5aae94f
 30 78f1fccd-ff4b-425d-ba43-f00258a1560d
 31 396b6eb7-602a-4569-a57b-7a73cf9d9d35
 32 e551e13e-76d2-4e87-b22f-67d8ab25715f

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 31755310232463355086267414850444. Exactly this sequence comes out of new Random(342).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 107 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs