A858DE45F56D9BC9 archive

201209200815 105v3r

explained decrypted filler

seed 241

Metadata

Post ID
105v3r
Title
201209200815 → 2012-09-20 08:15 on A858's clock
Posted (UTC)
2012-09-19 23:15:10
Timezone
UTC+9 · title 08:15 against posted 23:15 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,384 hex characters · 1,192 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209200815) = 9516e2f77fe280ed310d73fbd20d50dc (name+title)
GUIDs
37
Filler GUID seed
new Random(241).Next(9) ✓ verified
Run
Run 32 (seed 945,377,703) (seed)
Draw
10 · predicted N = 37 ✓
Machine boot
2012-09-08 22:08–22:23 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,384 hex characters = 1,192 bytes = 149 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209200815 (name+title). Key = MD5(password) = 9516e2f77fe280ed310d73fbd20d50dc, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 37 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e99205b1-addd-505e-8545-d5c58879ee2a
  2 56c0ad44-9f6d-4417-8ea8-d75006cb9cc3
  3 d5c98f0b-c63b-2481-8ee5-a188c91ba74e
  4 299024b9-7593-827d-b82f-b294924bf8dc
  5 823a24ba-ef5d-0cd5-999b-bb14da13e2ed
  6 63db9895-84f7-1632-be71-fbe5f97c72b7
  7 aa332fb0-8e17-7379-bc5b-9a0d65df32b9
  8 5caea920-d715-346d-8078-bff1abf2f0f0
  9 9206c05d-c280-74a5-8acb-e471b361cb32
 10 7c87f871-7d40-13a9-867f-e9ccd55fc2a4
 11 3d5682ec-9194-71f3-9c78-0bdd654535ef
 12 6e6c4d04-a8df-579d-bf5e-d184291ee3e7
 13 4d22d326-396d-241d-93a5-61109ac9ad31
 14 5a033ba3-969e-742b-ac42-701c13325925
 15 bce1cd62-9701-6083-8f16-4e139f89ecec
 16 22f126fd-c935-44f3-97e6-5ff91c83286c
 17 29ea8897-cc10-1788-bd59-43205894d0f6
 18 7071999c-1565-311c-a0f3-840a7bd0304a
 19 646b165a-e0ee-1895-8849-866653c79ec5
 20 7dc85cf3-7c6e-5aae-be6d-970958b89115
 21 16dccd72-d85e-709b-b4ce-6878115a60fb
 22 894cd990-9580-80e2-aba8-1228c470fa1b
 23 9528b17d-4db8-69a0-90bb-f8bbfab41908
 24 8126f784-bb5e-2926-b3f1-d64a67e5cc44
 25 559cd1d2-4b53-25e5-9099-88c427b39058
 26 8057e3e0-84ad-4500-966e-fdbbfe78dc8c
 27 4ff1a50a-6e32-11e8-8b1d-261a114376aa
 28 231f949d-a4fc-0f92-85ae-70fd7602f2ff
 29 73d7b3c0-77c1-1508-b997-5b11600f1a2a
 30 bfd5b186-f9f9-19ef-86b3-b8436c5f2857
 31 902d1c93-7e84-1a25-85f7-54b5f9803fbf
 32 dbff2736-4a96-8dae-b81a-8a2ce8bee682
 33 c32a00e0-93d5-1c53-bcc0-6c78384185de
 34 ff13c5f9-a4cd-0cee-afba-26c3836152e8
 35 e3a2d97d-5210-7d4a-8d65-b2ba640e64b1
 36 ab9dc04c-dab8-17e8-8e64-5eea2a44383a
 37 7db8e930-b8fd-54e5-84a1-4ccc1544079c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5428017371752764131578622410111810715. Exactly this sequence comes out of new Random(241).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 10 of Run 32 (seed 945,377,703): new Random(945377703), Next(8,64) per post. The RNG predicts N = 37; the post has N = 37 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-08 22:08–22:23).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs