A858DE45F56D9BC9 archive

201210051703 110fun

explained decrypted filler

seed 233

Metadata

Post ID
110fun
Title
201210051703 → 2012-10-05 17:03 on A858's clock
Posted (UTC)
2012-10-05 21:03:28
Timezone
UTC−4 · title 17:03 against posted 21:03 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210051703) = 93cfed0a7eb943dd5ed08a74327a2c25 (name+title)
GUIDs
28
Filler GUID seed
new Random(233).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
255 · predicted N = 28 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210051703 (name+title). Key = MD5(password) = 93cfed0a7eb943dd5ed08a74327a2c25, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d3a9105f-2c9e-4228-b3ac-d2c58fbfe561
  2 16b700dd-6905-1ea6-b510-c68ba0722e5b
  3 7ba2ebf0-fa57-5c50-bed7-22900bc3990b
  4 f4c66967-ed4f-2cc1-a857-fe7781c179b3
  5 798d13a5-d466-3921-9308-281e90ad1190
  6 0c29be91-8617-155e-ac63-337dbbcd94ab
  7 071608f7-43fe-2e98-b805-ad610ee28cdd
  8 33b47d30-1536-3a74-8980-f15a231ea38b
  9 90dfcfdf-0984-72e5-a036-0893cdb6bf07
 10 b5a58ec0-2b35-1c6f-8f84-9194d273552d
 11 ee7f383d-76f9-8164-bfe9-d1a717a23fcd
 12 be3eefd7-2c51-3cb2-9a2f-46ed0a31d659
 13 a7a10e4d-a76a-71fe-9fcd-2add9cf36c93
 14 8d8adedd-74ac-6697-8c00-9f115fb21095
 15 5edda4e1-c02b-0133-b116-7edc275c84aa
 16 a042e422-6ed6-42fb-889a-9c0241eda775
 17 af4da8f7-748a-729d-ac89-27ae4ce6bfff
 18 0013dd60-63a1-44a1-bf7c-3ad3b850062b
 19 9b30dd61-7713-848e-a020-e8021ec65b9b
 20 8ba1ac4e-179b-4a44-9677-884bf2b831cc
 21 79b4977d-3453-64f1-87d0-f90f02b1040c
 22 0f6edca5-dc66-0a8e-93c4-9014b5178975
 23 05944641-e9d9-3692-9f14-7f23283116be
 24 eff11c19-18bf-3561-a9c0-52166d8bfb06
 25 6a4e6c8a-013b-4abe-8742-2a1229f94561
 26 94f8abcd-f50a-3bdb-9bfd-7a035c98b489
 27 eeeed622-5950-2fd6-9342-e10d1504b9c2
 28 25280a72-eef2-0653-91ee-401084d975ba

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4152312371837604748460334320. Exactly this sequence comes out of new Random(233).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 255 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs