A858DE45F56D9BC9 archive

201209200845 105x12

explained decrypted filler

seed 52

Metadata

Post ID
105x12
Title
201209200845 → 2012-09-20 08:45 on A858's clock
Posted (UTC)
2012-09-19 23:45:11
Timezone
UTC+9 · title 08:45 against posted 23:45 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209200845) = 0e1d282cf7367bb7c9aef7634143b84e (name+title)
GUIDs
40
Filler GUID seed
new Random(52).Next(9) ✓ verified
Run
Run 32 (seed 945,377,703) (seed)
Draw
12 · predicted N = 40 ✓
Machine boot
2012-09-08 22:08–22:23 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209200845 (name+title). Key = MD5(password) = 0e1d282cf7367bb7c9aef7634143b84e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ffcc0695-ab3f-8c05-9433-57f7c5aead22
  2 6ade9e8a-1ffe-0d5a-b15c-1e4dee0f1fb9
  3 c7dff267-7b64-1e64-9a2d-36c34bc8474e
  4 623143c5-de1a-53a7-9908-4edf48317b30
  5 255d2891-2b0d-6e37-bd8b-d69715da87d8
  6 1ddb55a7-a99a-0187-a88a-05a8d866cc49
  7 e08497cc-00da-1d3e-be75-5a675af3a999
  8 43701cb2-1b50-450e-adf4-c3a29838b6b3
  9 6d541821-f2be-3939-9a4d-fc423f101274
 10 0f9ae554-61a3-4b6c-86ba-7ba72b8b8ca1
 11 a2080f7e-2389-56d4-9e44-bf1794a6fcc6
 12 d3ad14ed-949e-02ed-a18e-26b6f0b6f45e
 13 3bc74e16-cd9a-3b37-b75e-d0f896919683
 14 abadc69f-d14b-41e4-821b-9daafc1d1c7a
 15 5f1fcd55-34a4-3505-9013-48fb60c26393
 16 afdae08c-31a3-45f0-b13f-b07a16f849ff
 17 85883636-3759-6f99-9349-f0787c397ae4
 18 91a61df0-c8e4-23c9-af69-670169d099e7
 19 859ba4a8-7b96-04e4-a770-7b3558ff052c
 20 6763f42f-7ed3-4add-a985-d27828445367
 21 dfea6797-4671-6a84-81ce-9b636ac1d154
 22 419f37b5-636c-5948-9d8f-37f8dacb8c34
 23 8c310aaa-228b-7010-bd98-b6e6488f9246
 24 cc2215a5-1e51-1dc8-9771-14f87865f652
 25 976e7a4b-325d-7aa0-ac00-7f51446de923
 26 778b9518-bf4c-8353-a08e-b4198bfe5271
 27 5c3cc725-6abc-59a6-b7e1-dd40a2fd53ef
 28 b65e3f4c-6224-8b03-a7c3-8b9b3faa03bb
 29 63c1a151-5aa0-8a6a-88d9-76185d80d045
 30 b675f4da-f58e-8a1f-b4db-8e0350d25a38
 31 61d83770-e636-3a31-bde4-4db40a29eec1
 32 dcd0c6da-247b-10ac-bfde-95fd3d7feb7e
 33 9298f66b-f30c-1d47-a5ce-6eb6c5037d2b
 34 7ab37865-e3fd-26c8-ad8f-27c50fffaa9b
 35 46225939-5e97-7f61-b4e4-e77420c0a3c4
 36 8f531869-6227-0e0a-b4bc-72e4953227c3
 37 09d2ef5a-bde6-0dce-a00a-d86e11112433
 38 446aefcb-ab90-78c5-a05d-208e09a43fad
 39 12e0e8aa-4946-226b-9d59-f58a38836699
 40 5fb82d4a-2ca8-4c9a-9082-173030695f1a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8015601434503434620465717858883112700724. Exactly this sequence comes out of new Random(52).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 12 of Run 32 (seed 945,377,703): new Random(945377703), Next(8,64) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-08 22:08–22:23).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs