A858DE45F56D9BC9 archive

201210101100 1189ds

explained decrypted filler

seed 715

Metadata

Post ID
1189ds
Title
201210101100 → 2012-10-10 11:00 on A858's clock
Posted (UTC)
2012-10-10 02:00:20
Timezone
UTC+9 · title 11:00 against posted 02:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,512 hex characters · 1,256 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210101100) = 62552225ccfe37910067165cf1eec7d2 (name+title)
GUIDs
39
Filler GUID seed
new Random(715).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
516 · predicted N = 39 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,512 hex characters = 1,256 bytes = 157 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210101100 (name+title). Key = MD5(password) = 62552225ccfe37910067165cf1eec7d2, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 39 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c4a13a05-8a54-2652-aad0-9d519244a777
  2 6ab90e45-0bcb-55a1-9eb0-64f0276de756
  3 5ed8077b-cb4b-4238-aec2-dc3f1712e99d
  4 a6a15d9c-1ed3-18bb-ba8d-e9b757033b4a
  5 b28edb9f-2f38-05a2-aa31-cf90001dc338
  6 ec73945c-eff9-39b7-a59b-314df350fcad
  7 c4ea530e-3016-22ca-90cf-1b52a96ea3e8
  8 fde7fe22-35d5-183e-835a-d448789dc056
  9 d5f40a3f-7394-344e-a6cc-cc581f8a7df5
 10 cd7da46f-a8c7-8483-8657-13f3330db089
 11 1c7086f0-065f-0948-bf79-02ba83b53101
 12 5a18b7b7-76da-673f-b86a-041b6089167d
 13 c106b992-d274-12ad-8163-c3bd87555d98
 14 947305fa-155b-4360-8d21-ef9a7786bf90
 15 12ace851-5aae-4850-a367-60266c13435c
 16 e2259f10-7f72-59c8-8237-dee7b43352f7
 17 fff37c03-4de4-33fa-9d68-c88e3b87de70
 18 73204cd0-a854-20cb-9d3c-d3ca64ab6aea
 19 2a15eda2-999a-0fe5-ae6a-8d571614ad6d
 20 c27d097c-48ea-125a-b59b-14de2fbe56a5
 21 2f4986fa-44dd-77c2-b383-6fa90eb89630
 22 d670f527-29b9-22df-97cf-d7ad1ba387d1
 23 1cb27815-86f0-714a-86ad-2c22501e8a89
 24 399081cb-d6b5-73c5-aabd-8233928f478a
 25 fd0413ad-c78f-6709-9778-c7e7aa85bb25
 26 cf5c786b-8329-3b53-81ad-3eb7f9bd02a2
 27 8535bcff-d140-5408-b593-352793621347
 28 677c101e-2fe0-6701-8940-aeeaa7d4af6c
 29 d4bc338e-94e2-031e-983a-e8500ef6f614
 30 51167c68-871a-8f09-a340-1b6bd4008912
 31 c4871d2b-3b39-1f50-8df8-77f7995d9ed5
 32 318471d1-f2fb-7640-992b-f9a14a6107ef
 33 0688805f-7940-73c4-914c-347ac3d4b460
 34 b94c01c1-e0b1-8e14-a699-4377023b3205
 35 718a0e6e-28fa-29d6-9821-17a90d315360
 36 9b2ac3ea-2bb4-6ae5-ae63-f109618565a0
 37 7ad38bc4-bc48-2e8c-aac9-5d79fcced4cf
 38 07e5844c-0127-5236-a75f-207564b226ec
 39 c53c16c1-7785-70af-84aa-2944fce788b2

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 254103213806144532017277635608177826257. Exactly this sequence comes out of new Random(715).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 516 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 39; the post has N = 39 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs