A858DE45F56D9BC9 archive

201210051723 110h5k

explained decrypted filler

seed 65

Metadata

Post ID
110h5k
Title
201210051723 → 2012-10-05 17:23 on A858's clock
Posted (UTC)
2012-10-05 21:23:29
Timezone
UTC−4 · title 17:23 against posted 21:23 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,936 hex characters · 968 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210051723) = af95751bb60f1ff9f6ac4b5480c16044 (name+title)
GUIDs
30
Filler GUID seed
new Random(65).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
256 · predicted N = 30 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,936 hex characters = 968 bytes = 121 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210051723 (name+title). Key = MD5(password) = af95751bb60f1ff9f6ac4b5480c16044, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 30 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b72da54b-9966-6703-9f5c-82ccefa53aa8
  2 e1a0e234-2530-8c8e-930d-c37057f0f158
  3 c0201e31-4585-1553-b380-325ffcfee4a4
  4 41ffb2a5-c415-3c5c-8d97-1ebf5477e37b
  5 d5e4e4d8-ee7c-4b3c-81b1-e02e7f538706
  6 5861fc33-ff82-31d7-8043-09aae289b68c
  7 19ebafaf-b197-02ce-872e-275fed79b1b1
  8 018826ce-1e42-0bbb-93bf-1713e6497537
  9 5e671f41-6a6b-05ea-9af6-c3472c9f65e9
 10 9f1ae7d8-cf43-2cf9-93a1-8d15ff055fd8
 11 b70550f6-5e21-1d99-8d58-2da1ce3582cf
 12 c11fa634-3f3a-1adb-be4f-00f35f82c928
 13 a6e64db1-47c0-2a68-8a47-66a64fc3fb21
 14 e9e53407-ac1e-2719-903b-1597f9819c8a
 15 9fc3ac7f-1bda-4f70-80c0-fedbd40b47d7
 16 ab1476f9-9997-5409-ac53-b9a59e91430e
 17 707e8214-42f2-13bb-96db-e275c65e2340
 18 17014e14-a245-204f-b0a7-89f8b7c39040
 19 bbc12627-c464-33ea-8dbc-a53079230efd
 20 e998fd1b-4d8c-445c-8a71-efdf7b49edc6
 21 273a3096-7e55-4388-aaac-63da530a88ab
 22 df4eae27-8b3a-7bf6-9c6e-38d588e01af8
 23 f4afbd86-385c-8ac7-8d51-fc964dc0e17e
 24 578a82e8-9968-6090-9a9d-a7c43e38741d
 25 d229bbc8-2ee9-0a44-b6e3-f0588ca11c38
 26 dc2e051b-3e9b-232a-b97b-35641f21c34f
 27 36547272-172c-7597-bc40-8cd7c0c1298a
 28 c437db85-6d2f-826a-887a-21be533ce0e8
 29 7327db9a-2ca6-4b5a-9344-fea011f599a4
 30 19a80469-c504-35a7-bf7f-65a1e6c42614

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 681343000211224512344786027843. Exactly this sequence comes out of new Random(65).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 256 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 30; the post has N = 30 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs