A858DE45F56D9BC9 archive

201210101600 118pg1

explained decrypted filler

seed 874

Metadata

Post ID
118pg1
Title
201210101600 → 2012-10-10 16:00 on A858's clock
Posted (UTC)
2012-10-10 07:00:25
Timezone
UTC+9 · title 16:00 against posted 07:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210101600) = 05919fe7f57f1a62de8a4b5597194893 (name+title)
GUIDs
40
Filler GUID seed
new Random(874).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
521 · predicted N = 40 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210101600 (name+title). Key = MD5(password) = 05919fe7f57f1a62de8a4b5597194893, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b5ba4f3d-4a36-21a9-8251-2857c225a28c
  2 bf79694c-5c5a-2829-bde7-a9cc7c901347
  3 cf457872-48e1-6c1b-a9da-a064e2deffc4
  4 5dae59ae-4388-00d6-a1f1-7ab6229918bb
  5 5db666b5-3565-7042-acce-10dcea8413a2
  6 ccc18e85-8094-362f-a169-a7f70bbebb0b
  7 2eaed797-1f48-4499-81ac-1d38aa5a5dd4
  8 53c46b6a-b1a1-801a-947e-7861909dc75c
  9 ad83c67a-e4d7-090f-9d7a-1ae5ec735821
 10 3f61609e-7b20-554e-b443-2efae1892b17
 11 2f4e5fc3-fec0-189b-bff8-e49c327268d7
 12 afe5ace3-3f30-747e-be0f-7f361f00e725
 13 7334d84b-8a70-4866-bca0-2eb4fa150067
 14 6afae228-24e5-1b15-be3d-4e9fa209c4a5
 15 84fdecac-1999-6698-9be6-ce060d3c6a5d
 16 67cec1ca-ed14-7afa-b539-e1d9691c0136
 17 651ed0f0-b91f-24c4-913c-ad7d19ffe7ee
 18 bdca739d-7435-766e-91d1-87c325df4c47
 19 f8adbb9d-6e84-3325-a3fc-92cc2143d73c
 20 520ab60d-abde-61f5-8156-b51f8aad8b85
 21 3515bb60-8590-8a7d-9e8a-47da9a8bd199
 22 1d23933c-6a8e-20c1-b7f9-a59a6739ce84
 23 b18bc00e-ca53-6d90-a324-932e7067f924
 24 3bdba3c6-5f8c-3940-872b-f340df98469b
 25 4aeb22e1-fb3f-3407-bea6-0cf659a7b535
 26 bd34f18b-d0b5-648c-83bf-fea77f0c1b75
 27 8a970264-fa78-3553-bc5b-77beab035501
 28 5a3f2820-338e-2184-96f7-ccc6f7e2ea44
 29 49f4075a-625b-8f9f-b3e3-b381eea04555
 30 62c71678-0604-8864-b6ec-90ac469b1612
 31 6f072384-0b7d-74ee-b059-6dd65c9cba44
 32 d9b38119-2962-6baa-bd54-0bf57d710c5b
 33 b7bb85ba-04a8-658f-ba3e-10e3af17decc
 34 828d31d9-3247-8cc6-9349-6ea9f2204de5
 35 03e2ad3d-811e-7702-9695-6fc8b42f94b3
 36 965b458c-ec28-5877-8e39-77ceffe474c3
 37 0d150e70-5dcf-078f-89a8-daa804c351d5
 38 3ab31f21-19fd-007f-86e0-0996a6c2eac3
 39 aaa12859-0a47-0ccd-8f51-b1deeb66e2b1
 40 75684d7a-3d5f-1657-ba77-75c7d9e92f31

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2260734805174167273682633632887668750001. Exactly this sequence comes out of new Random(874).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 521 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs