A858DE45F56D9BC9 archive

201210092300 1171qg

explained decrypted filler

seed 404

Metadata

Post ID
1171qg
Title
201210092300 → 2012-10-09 23:00 on A858's clock
Posted (UTC)
2012-10-09 14:00:08
Timezone
UTC+9 · title 23:00 against posted 14:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,512 hex characters · 1,256 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210092300) = 982637543545641ee5f5e4eda0b7699e (name+title)
GUIDs
39
Filler GUID seed
new Random(404).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
504 · predicted N = 39 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
8 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,512 hex characters = 1,256 bytes = 157 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210092300 (name+title). Key = MD5(password) = 982637543545641ee5f5e4eda0b7699e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 39 GUIDs as hex (shown below).

Decrypted: GUID list

  1 1f21db3d-1446-7bfb-a2a7-e794f510c84d
  2 c058b312-6d28-36d1-9f8b-b7f01e603d5c
  3 98b58eba-f2df-1199-b697-f17fb354b499
  4 17527af0-44b1-75ac-b19e-515df81f0468
  5 8eea4fe7-11d1-54d9-b101-0d6f5cd104cb
  6 be09bb2c-19ba-52bb-93e7-b600c68a6eb8
  7 e25354e6-55fb-845d-8e61-f0a50be2ecb0
  8 8b882c1b-3a54-1703-a925-65c20b53663f
  9 3c876530-fe9e-8274-a813-6814cc71e03a
 10 36f6e848-cefe-2885-a3ae-8a92a51ca71a
 11 b39f8de8-490b-84ee-b26e-b03f828d1bd8
 12 c9a551ca-5686-73df-b6cb-15548aafa9ff
 13 bf826e62-b4b1-38de-91b7-f5e97d5b9d83
 14 74766b4a-6da0-5295-a639-02523c0dc272
 15 b6969714-9455-6d06-9501-f459a7909836
 16 2b0d4270-60ae-38f0-ba87-7979d2aa2324
 17 d7feb55a-a46e-6df0-8c51-cdb9eec48137
 18 8592e238-3771-4e1a-ad32-0f0817d97b0b
 19 0865d3f0-3de0-51ac-9e8f-afd1753c8d55
 20 0229465a-1aac-6ebe-8efc-713465a753f9
 21 0a196a75-5113-4eae-80e6-bccc14ed7f0c
 22 744ce5ca-c794-801f-a66f-50dedc2c218a
 23 82769577-d547-2561-bea2-33b9281a922c
 24 80f53635-fe8a-15f4-a629-8655d40fcfaa
 25 ae8e6738-8b55-22e4-830d-409714c5aea8
 26 0b7fbcf0-f6a6-31e5-9857-cf858e38999d
 27 8fa82fed-3e0e-2edc-860a-3ec117bfe332
 28 91f0aaf0-052e-0258-9bd3-0589382d39b3
 29 1b36eea3-9aec-136b-bc0d-0131e4609f36
 30 691ee797-add2-4582-bb77-8e24e115b66b
 31 a9fbfd52-8470-3542-9eac-14301e583b51
 32 c191a223-ca05-7eca-859b-c89093436888
 33 f61328a0-6938-6829-8475-8437f78c3f91
 34 5e3d791e-9735-11d7-b91d-30f5b8b5907d
 35 32f4dfd6-521a-6999-84fc-349ffc09a84c
 36 1d10e210-a71e-26f3-965a-2f5bde597713
 37 9a1e59cd-87e4-69fc-9667-d2d29de47653
 38 015b6ab9-9a3d-6531-972a-95c7c977bc80
 39 5386612d-6065-4559-969a-3308d6620e42

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 731755818287356364564821232014376162664. Exactly this sequence comes out of new Random(404).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 504 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 39; the post has N = 39 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs