A858DE45F56D9BC9 archive

201309210632 1mtyan

explained decrypted filler

seed 291

Metadata

Post ID
1mtyan
Title
201309210632 → 2013-09-21 06:32 on A858's clock
Posted (UTC)
2013-09-21 10:32:54
Timezone
UTC−4 · title 06:32 against posted 10:32 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309210632) = 2b00c82df16f3a700e5a3c875827b212 (name+title)
GUIDs
32
Filler GUID seed
new Random(291).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
120 · predicted N = 32 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309210632 (name+title). Key = MD5(password) = 2b00c82df16f3a700e5a3c875827b212, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9f686f13-05ef-6c04-b95b-5a9189bfca55
  2 b9b773bb-4c76-1f0c-ae40-be28fa58d4ab
  3 5f3ecdf9-8114-1d21-9e7a-27224c34ef48
  4 be759340-0a91-6f02-a7e9-d7626bc34e09
  5 c1832442-98fd-5c50-aa9e-fcd942b06524
  6 146f1593-a376-7eac-b1cd-cc0dec728b6c
  7 fec11005-d4fa-2cb8-9b93-d74779b49141
  8 d21459b2-6ca0-3308-b36a-2bac372eb37e
  9 5c23c493-90f1-84d1-a8da-6fa0ba52c57e
 10 99ce755e-2aad-5bec-bdac-7b07c27226c0
 11 085e91ce-3e66-6b83-a0b1-9a1463a165c2
 12 997363fa-bb4f-5dd7-bb14-6ba8852af6cb
 13 962cdd35-c48e-6a1a-a3f7-59848ad037da
 14 b002752e-ad4c-7fd1-bb54-162bac09a4b1
 15 e627b692-cce8-6a04-9393-064d915ff85c
 16 e676c9ff-eb2c-6688-9548-a159d0087eda
 17 fd70bd78-d069-1e0d-81a2-8a7ec028623d
 18 6009cf69-73d1-376e-86ca-238c3fafc820
 19 f7f93ecb-987c-410f-86f9-50c0191d2a9c
 20 6cc4ffb1-727d-80ac-b4ab-8995364cfee2
 21 15d71c10-c4ef-4cea-b601-14f92944ce92
 22 514fd62e-3422-26dc-a2ff-4a51156ed2f7
 23 42572356-b79e-1af0-8204-3f46baf4496b
 24 66c7089b-56d1-6f04-928d-65d5d1cc150f
 25 e660da5c-edf5-164b-aaa9-d647875326fe
 26 55c7e6b6-ea11-6f82-8ec4-63a546d103dc
 27 bd9e6643-e116-1c0f-997b-caed0b44123e
 28 3c7f3ca2-57f4-814e-b3c5-90510d710fe1
 29 e9da1ef7-70e7-8585-a3db-85dc1c3300fe
 30 4a19b267-c453-358b-9ca7-446a132a82d2
 31 bcbb2148-23c4-5b56-82a9-fda19e673bb2
 32 499e25e6-c7b8-01ba-a0e6-f5c690172c82

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 61165723856567661348421616188350. Exactly this sequence comes out of new Random(291).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 120 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs