A858DE45F56D9BC9 archive

201310011914 1njno5

explained decrypted filler

seed 314

Metadata

Post ID
1njno5
Title
201310011914 → 2013-10-01 19:14 on A858's clock
Posted (UTC)
2013-10-01 23:14:52
Timezone
UTC−4 · title 19:14 against posted 23:14 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201310011914) = f4c5cbde66b40c564feaec7a7e8e11a0 (name+title)
GUIDs
32
Filler GUID seed
new Random(314).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
148 · predicted N = 32 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
10 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201310011914 (name+title). Key = MD5(password) = f4c5cbde66b40c564feaec7a7e8e11a0, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 04a3a0b1-df70-609f-95e9-3199839bd65b
  2 5268c6c4-7008-87fe-861e-e50d0a1e325b
  3 75360563-2e85-209b-a94b-1ca924a6e5a7
  4 39eeeb1c-dbf1-529f-9e7d-1f64ec88c34d
  5 2f043406-7676-8780-afa8-9ee415df4cdb
  6 d93a0b9d-cebd-8eb6-9b74-25f247d01d03
  7 0de54291-fb03-599c-9a29-d44cf663ea9a
  8 313547de-756b-82a6-a8df-04fb958509e8
  9 2f079595-e468-738e-9fcd-8388c57e2695
 10 4c95c8a8-65d5-0f9e-b2a1-50b5e8bafbcf
 11 ee1e5ea7-3bd9-5f73-b0fa-d6c6ca3a2a08
 12 7fdd89bc-f4ae-5d8e-b579-d65d2d2e573b
 13 486b828e-79df-49ee-b712-aff82f4d697f
 14 07615d90-2a4d-74cb-a04e-cadba3e46678
 15 8f5c6a77-f2f7-693e-b6e0-0c90969b7dd5
 16 e6fe7609-36e5-1c02-8eb6-12fa53bcef38
 17 d5f4a125-04e5-708b-9372-2cd8a70d5b00
 18 80fc41e1-674b-63fc-b405-7db2d4476dfd
 19 4eb26b7f-9660-1e34-a752-f477266bebe4
 20 08faad81-0d0f-8e7e-a68e-6e113140a30b
 21 64b88d5e-1575-497d-8619-d4268a7fb3c6
 22 90291b05-ae30-7c80-aff0-2067d17b71fc
 23 6a78a49e-6216-0001-9860-e9c910901fb8
 24 9a7a3d21-358b-63da-9e35-6536e4707c8c
 25 cf4471ff-dfd5-48d3-90cd-76bdcd5be765
 26 848ef48d-0b93-43a3-9f89-1120a3e8249f
 27 668eb1d5-a84d-8515-be35-8d4609743197
 28 9abc775f-28cd-28de-a06e-54cb12d83536
 29 e09f3a31-9e10-231c-bffa-846fcd2cedc6
 30 c413c853-e6ce-8073-b775-05fa3dddf643
 31 4164afe6-ea1c-0fa1-9247-0dd75727b071
 32 eb9b034a-4b84-1f4d-992e-dbf95f8fe2e5

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 68258858705547617618470644822801. Exactly this sequence comes out of new Random(314).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 148 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs