A858DE45F56D9BC9 archive

201210111700 11bvjs

explained decrypted filler

seed 539

Metadata

Post ID
11bvjs
Title
201210111700 → 2012-10-11 17:00 on A858's clock
Posted (UTC)
2012-10-11 21:00:06
Timezone
UTC−4 · title 17:00 against posted 21:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,704 hex characters · 1,352 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210111700) = cfaccaacee3e0774d57d5826c106e66f (name+title)
GUIDs
42
Filler GUID seed
new Random(539).Next(9) ✓ verified
Run
Run 36 (seed 335,015) (seed)
Draw
6 · predicted N = 42 ✓
Machine boot
2012-10-10 20:54–00:54 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 5
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,704 hex characters = 1,352 bytes = 169 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210111700 (name+title). Key = MD5(password) = cfaccaacee3e0774d57d5826c106e66f, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 42 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5af2da00-046a-2990-b5b4-b8b42285581f
  2 269e1292-a068-8dee-b71b-7e9522ab5c29
  3 13892cc3-679c-4b6b-8bc6-48e32f99e6dd
  4 bb5e172e-c299-5e1e-90fc-756a1603909c
  5 f20fc448-34a8-5ba9-8bf1-05fc4399c7c2
  6 cd60d7a6-5061-56e9-ac60-335f55c8f24c
  7 4d4ddd58-dac8-355f-89ff-0a2284045933
  8 79e16de5-49fc-738b-bf09-88f94b75c445
  9 5574105f-87f9-5a80-b7e1-04422a4e423e
 10 21bbe873-3fe3-01c6-a460-c60354a42784
 11 d261f290-2807-36fc-a102-2794a2b21183
 12 218b1aa7-9e8b-2e34-995e-134c316ae7b0
 13 603e6faf-7cec-1304-aa7d-f7a04a71655a
 14 82179c7f-c002-726c-8848-72476244c930
 15 098f7a4a-ccd3-23c5-a3a2-3c1faea072e3
 16 07dbe61d-4e41-5102-876d-ce0e8249b868
 17 565d40ef-8bcd-3fa2-9ad8-9d9152f51a00
 18 b1c6a24f-f3f8-1ee3-b922-cc46de9973b1
 19 5a34bc17-71e5-2cbe-b8c1-1ee91892ef5d
 20 787c8998-1625-05d5-bb4b-e2c872251a06
 21 804c8d9a-b330-37e0-86ba-14d869257187
 22 1527a9a3-b71d-0bef-b692-48136482235d
 23 afe746ca-657a-02bb-b25b-a45b072674a5
 24 1943e96e-f62d-2258-9574-a84c072de49d
 25 fedfbca0-3f71-4603-aa7d-8e18b4966905
 26 2c17d1ed-c8c9-1f70-9fef-efe29810c8e6
 27 ed0c4b92-af00-3576-b0b3-31e0bc71c932
 28 519ef08a-b605-599b-b03e-f23063ac547e
 29 a840cda7-e8bd-30f1-bc26-a9d1e6d026c6
 30 13eab631-7515-1841-ae4c-cb147cf659c7
 31 d54cf68f-3c4f-1489-823f-816a8fd2f489
 32 41c2ee19-2047-3402-bcbc-14758b985d7b
 33 7d42ad26-c2bb-0513-b7e3-438349a0cd45
 34 28f60d4c-35ca-4f89-a2b2-652ce6110c75
 35 52b1d015-a218-794a-a75f-43c305d2bfec
 36 4a5c86b0-8eae-17fd-8bf6-d87c8f48faf3
 37 cc797eb9-e4be-4c2b-b260-03eb804af01a
 38 1fde2088-063b-63d5-ba6c-9f802e3f7522
 39 b1f45dec-cbc0-53fe-87b9-86e20df6ea0a
 40 27b085c1-f9be-0d63-ba44-c33c63fde82c
 41 d6f40d8d-28d5-2992-ab8d-63c63c85525a
 42 6dd2a05e-a490-4021-bcaf-c520f7d62743

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 284555375032172531203002413531130471465024. Exactly this sequence comes out of new Random(539).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 6 of Run 36 (seed 335,015): new Random(335015), Next(8,64) per post. The RNG predicts N = 42; the post has N = 42 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-10 20:54–00:54).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs