A858DE45F56D9BC9 archive

201210050643 10zjl6

explained decrypted filler

seed 108

Metadata

Post ID
10zjl6
Title
201210050643 → 2012-10-05 06:43 on A858's clock
Posted (UTC)
2012-10-05 10:43:07
Timezone
UTC−4 · title 06:43 against posted 10:43 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,192 hex characters · 1,096 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210050643) = 75891eeab35f16a1e49bd88ac3a55531 (name+title)
GUIDs
34
Filler GUID seed
new Random(108).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
224 · predicted N = 34 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
7 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,192 hex characters = 1,096 bytes = 137 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210050643 (name+title). Key = MD5(password) = 75891eeab35f16a1e49bd88ac3a55531, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 34 GUIDs as hex (shown below).

Decrypted: GUID list

  1 94629fe2-20a4-1050-80ad-9651f539c9db
  2 c5f8a8f3-4208-496d-a1d5-38cc78b73597
  3 72acb48e-5e22-2659-a055-c0513eeaa7d9
  4 eb7271e2-40d0-56fe-b23d-035a5a912446
  5 ddc06c32-faed-85e2-a422-b15f081ae884
  6 4e7e2062-2282-8f8e-a64c-2a70fe7373a4
  7 59323633-9846-2b28-a406-b19c6e93c47f
  8 a1f5f23a-533a-575e-a573-bbf068aafcfd
  9 0250eb47-cd8c-3e71-a4c9-3a546b436027
 10 5b8c5a96-16e7-0a49-9b41-e7107f09e1f6
 11 b22c7cf6-91d6-7477-a0d2-7e6f85505e66
 12 d6d607b2-b053-70c8-9e19-514902e20f26
 13 6e3fb069-1964-7a4b-b5c2-f80aa940716f
 14 46e91626-827e-5848-b4e2-ed832cd4ca37
 15 12beb924-ae67-5394-b0e6-49b4e15209f5
 16 b69853f9-0a76-49fe-8b79-b133d8c27e62
 17 5064dce3-f90d-2f80-bb2f-68a9b9f2a716
 18 0a29129f-f513-8642-bed6-aeccd5b4124c
 19 0c6c99e1-8edd-5840-851f-19f889a75660
 20 9145f942-c140-177a-9b58-ec6e13c5b1c8
 21 10432fc5-983e-1a7f-8bf0-519e75000b1a
 22 5b584697-341e-3320-b016-176c0150add8
 23 7abe1611-8c80-2581-9aa3-3ca0caa56aa9
 24 54adb069-4864-6fa3-999d-3f0c2fe51eef
 25 e0ea2db3-629d-207a-88d2-68ef8f959bc0
 26 f479bdc6-896a-8126-8cc2-c2c49b6d56b2
 27 6893249e-f724-7083-9ee7-86bcc5b29f54
 28 628c9c88-d08f-53c2-a408-b1ecfac62d55
 29 5c24fda1-ad52-3850-9acf-8dd7738f85b2
 30 0e810015-5a6b-0c29-bfee-a35c82650b53
 31 d06855d5-7f71-027e-b660-229fa2c43d6f
 32 8bd4187a-2425-862c-bfd2-dae73256d53b
 33 868bfafa-0c2c-69cf-bf5e-20027113109b
 34 37a0d6d7-8ac4-6fe1-b9ad-65e89050c37c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1425882530777554285113262875300866. Exactly this sequence comes out of new Random(108).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 224 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 34; the post has N = 34 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs