A858DE45F56D9BC9 archive

201210111300 11bfbb

explained decrypted filler

seed 209

Metadata

Post ID
11bfbb
Title
201210111300 → 2012-10-11 13:00 on A858's clock
Posted (UTC)
2012-10-11 17:00:05
Timezone
UTC−4 · title 13:00 against posted 17:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210111300) = d1ecc0ba87baf8caad68c80534ade112 (name+title)
GUIDs
32
Filler GUID seed
new Random(209).Next(9) ✓ verified
Run
Run 36 (seed 335,015) (seed)
Draw
5 · predicted N = 32 ✓
Machine boot
2012-10-10 20:54–00:54 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
25 · 11
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210111300 (name+title). Key = MD5(password) = d1ecc0ba87baf8caad68c80534ade112, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 22bc6728-2d66-87fa-9e32-5c6e0cb93545
  2 2bed10f9-c570-12cb-9f31-2a2c1d183e6e
  3 e2b8da49-2412-73a6-acb0-9e5e93ac8a20
  4 033b9bd9-96b7-18c4-847e-8758c87587b8
  5 ec57409a-e84b-5888-bc7e-6f820db61fca
  6 03556eaf-bbe3-185f-82ca-123f85f6d88d
  7 92f4be57-574c-4a07-aebf-8f854fc67249
  8 826baf00-3d65-23fa-827c-4e3ba4bbe4f3
  9 0d3ee4e3-af11-7d95-93c4-c880fd3c6c1a
 10 62bfdbfe-248d-3ebf-a3fc-5615d80262f0
 11 3096d4c0-b36b-2b51-91cb-f643290f25c7
 12 c8105dae-3304-5352-b05f-f4e6e945e0d2
 13 a7f2ca21-6968-2a64-939d-c66d0c4d7b6d
 14 3470b167-c322-192c-b393-725c7559cde3
 15 1488eb1e-9009-23e8-a334-7965b9e03602
 16 2483fe4d-7abd-4c5f-82fb-782f8a7ca60c
 17 c386c9ad-a7ac-6a18-b604-d33a3f21f8bf
 18 6f55d8fd-060f-5a2a-82bd-603e7ab50a61
 19 6f2b6da4-4595-37db-befd-054e6dd882bf
 20 1dc3c3f8-8259-2a8d-8386-37ea7424d9cd
 21 898090f4-6a4d-5c83-84ee-d378b439977e
 22 bdf16916-319b-10bb-a23d-f55830fe895f
 23 4fdafef2-ae23-2e33-91b4-21114a633aa4
 24 7d296175-cc1e-0ae1-8ea6-3c9dc86ea4cd
 25 1c5dad45-83d0-1623-b8af-ebc9796b2f39
 26 d4c7522b-562f-8b7d-918d-3a4781912105
 27 e2295af9-9147-58fc-b826-dea2bd79c843
 28 bc679f9b-f1ef-1b63-a5b9-e6695d924cb8
 29 806850bc-fa88-2ce3-abed-782b397961f4
 30 ae790102-d0ca-3cb8-a1e7-705745015f3d
 31 4e24b347-b203-3b60-a9d7-8572034d93e5
 32 72acc7ca-939e-4238-91f7-089e9dbd0b99

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 81715142732521246532512018512334. Exactly this sequence comes out of new Random(209).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 5 of Run 36 (seed 335,015): new Random(335015), Next(8,64) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-10 20:54–00:54).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs