A858DE45F56D9BC9 archive

201210050703 10zk3w

explained decrypted filler

seed 665

Metadata

Post ID
10zk3w
Title
201210050703 → 2012-10-05 07:03 on A858's clock
Posted (UTC)
2012-10-05 11:03:08
Timezone
UTC−4 · title 07:03 against posted 11:03 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,256 hex characters · 1,128 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210050703) = 383bea28acd6a14671785f9669c8799d (name+title)
GUIDs
35
Filler GUID seed
new Random(665).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
225 · predicted N = 35 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
11 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,256 hex characters = 1,128 bytes = 141 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210050703 (name+title). Key = MD5(password) = 383bea28acd6a14671785f9669c8799d, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 35 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b3c2f265-4f27-184d-b13a-a4bbf018f938
  2 579df5ff-5211-86f8-a6a0-0c510e3447b1
  3 8d9f7d26-d997-54eb-9aaa-1311fa4d7321
  4 872fec92-0803-4bf8-ad34-64980d87e20d
  5 31131282-6b2b-3c02-aae9-68756ed71fff
  6 aa1ad772-b867-6ae1-89fe-9567f1557e8e
  7 05fe41be-39e0-7b5d-8ba8-40c443647d99
  8 c50eb977-947e-0b15-a192-637cd67882e1
  9 2a43e4df-378f-29d0-ac4d-1bf326188e9d
 10 f032f3bf-38ad-4eab-acee-08b186bfd7f3
 11 073cdc6e-bc86-1439-82a5-c11d24f52185
 12 07ea13de-4b9b-5d59-9e77-4cbff8d05148
 13 40dab303-bcdf-74f5-b3ef-190544dccb95
 14 dde974d5-08e6-321c-9e75-ded30ee731f6
 15 77b648b8-8250-44af-b471-65ae13c1bf0d
 16 7d5b8eac-2b02-39f2-8f8b-921b0f566fea
 17 467241ce-f264-3842-90c2-aa7616b68a86
 18 38320c99-34fd-29ef-bd1b-ba4de0936155
 19 4005c27c-561a-691e-9230-94f905274e20
 20 03c8f425-338e-7bc9-9830-13fb2d57cb12
 21 bf703f7e-7c72-103e-859d-bd5f04311194
 22 aaade640-7667-82fa-99f9-33b0f7a894fe
 23 9f15aa4a-7a66-31c0-befb-065ada8f8229
 24 7795f5d5-73a8-36b7-8a47-3994b8ab7ff3
 25 d97422cd-f0ba-72b8-b7ae-b6d5ac88a822
 26 7c1b85d2-c63b-255d-86fd-cef29836c77f
 27 53ccee03-a8fd-6f4a-8975-c989222dda71
 28 e1454b35-72e6-6f84-ba15-6d6957e2814a
 29 aba980c7-50e6-2af8-b6ca-1140e9e817e1
 30 40573719-a8e5-5b48-bd06-021511542634
 31 50b2ff82-c9dd-678b-a490-4c13651a22ce
 32 4024f2dc-284d-5084-99a7-ff39c655a8e6
 33 4d330dfe-c98b-6da1-a51e-77ce1587dac5
 34 a560fbe9-b21e-50d7-bc1e-b431abcd989d
 35 0ca93298-4b43-7b43-97ac-6d2582b51730

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 18543670241573433267183372662565657. Exactly this sequence comes out of new Random(665).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 225 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 35; the post has N = 35 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs