A858DE45F56D9BC9 archive

201209201100 1065in

explained decrypted filler

seed 911

Metadata

Post ID
1065in
Title
201209201100 → 2012-09-20 11:00 on A858's clock
Posted (UTC)
2012-09-20 02:00:20
Timezone
UTC+9 · title 11:00 against posted 02:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209201100) = fe95c64670a4975d97832f4c0e672702 (name+title)
GUIDs
32
Filler GUID seed
new Random(911).Next(9) ✓ verified
Run
Run 32 (seed 945,377,703) (seed)
Draw
21 · predicted N = 32 ✓
Machine boot
2012-09-08 22:08–22:23 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
45 · 10
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209201100 (name+title). Key = MD5(password) = fe95c64670a4975d97832f4c0e672702, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 64a24450-a99a-5b79-bfa8-99ec087bbaaf
  2 bc2ed5ba-53ad-1916-9197-ffb25ca870ac
  3 bace490c-46f8-43b8-ade9-fc9a52521c1f
  4 4ce82146-02b6-0d5b-80d1-29b964445b22
  5 34ee37a9-b47e-4c6a-b493-60b4e5e7112c
  6 ad0401d0-811b-6700-a415-eccb3c139a4b
  7 82da6b30-e3d3-067a-a5d0-971731d39f88
  8 35407912-5d56-4ecf-ba08-c1e2b847fd5f
  9 fece2ccb-9dc2-68ae-8e1e-36c2fc5075d9
 10 533b72be-f4e1-1762-a956-76e0571671d0
 11 d903d107-3eaa-4270-b80d-816070a683b7
 12 1f56528a-df12-6dd6-bce7-53aee1e37038
 13 4c224e35-0f0b-858a-b813-38a3fec4206a
 14 afad5d15-95e8-30f2-9e82-e3ca83a7b196
 15 161a10e4-5ad3-564d-922b-abb5f22d0d33
 16 7bb02f40-7c87-8850-9162-5f8360a22fd1
 17 21ba8e3b-624c-77a3-90a1-09c36f3f7a2a
 18 a0ae0e34-28ef-77bb-b298-bf1f2b795bdb
 19 4faa85d5-8793-3ac9-b7a8-c3527b8d2790
 20 6c3c98cc-6505-0978-b24c-867f90e5f010
 21 809dd189-12f9-752a-8672-ccdc1198a596
 22 e66ac1af-e074-3531-b56e-271a6e6af444
 23 90e53c8b-3305-8d09-9a53-118f090e76f3
 24 1762bdc0-ab49-2a84-a2c9-3181d7cee0af
 25 28b3f4b7-8453-8f6a-a98a-f87ba6a7dc75
 26 e964b3ef-60db-4a76-8efc-8a4ff9e95090
 27 23636626-af5a-1f7d-845f-707d72f50f11
 28 960b026a-2d78-153a-a453-b0ce9825a277
 29 7d0869f5-ca90-1697-a69f-77017a3c9a83
 30 f5213c05-0fc4-65b5-9c4a-b287074c8472
 31 eeefb662-547f-4864-8cd5-4013ca2fae65
 32 aad9d9df-dc3f-32d2-ad14-400b9958b424

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 51404604614683587730738284111643. Exactly this sequence comes out of new Random(911).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 21 of Run 32 (seed 945,377,703): new Random(945377703), Next(8,64) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-08 22:08–22:23).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs