A858DE45F56D9BC9 archive

201210121300 11dg2w

explained decrypted filler

seed 26

Metadata

Post ID
11dg2w
Title
201210121300 → 2012-10-12 13:00 on A858's clock
Posted (UTC)
2012-10-12 17:00:12
Timezone
UTC−4 · title 13:00 against posted 17:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210121300) = a191ed99fd6071383a453bd38052459c (name+title)
GUIDs
36
Filler GUID seed
new Random(26).Next(9) ✓ verified
Run
Run 36 (seed 335,015) (seed)
Draw
11 · predicted N = 36 ✓
Machine boot
2012-10-10 20:54–00:54 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
8 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210121300 (name+title). Key = MD5(password) = a191ed99fd6071383a453bd38052459c, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 336e197f-2ad6-28d5-8353-d4fbf0f94652
  2 25c96cb2-02af-4425-9159-3970002b1a54
  3 191c8c40-f6d6-8d08-a839-cc77db81e245
  4 fb93414f-8c36-09b0-a6f1-4d41cd4827e2
  5 f0fd4d2a-ca0f-87e0-851a-b7c58baf9ee0
  6 2cd57c1d-3de4-240e-838c-f4c46b3d43fa
  7 980fb39f-4b8c-4088-b827-56610f736002
  8 4d2ef897-0ab8-4e0d-98e5-3b294ebf608e
  9 4fc7279d-054e-1b9d-947b-7680874519d9
 10 706ff9d0-8056-770c-b68c-3907dc3dcbbc
 11 ab17d54c-6679-4d4d-8f40-c7e48726ba09
 12 b4b50f4a-c083-6be7-9f21-17d0bc981317
 13 5a3b7779-ec29-498b-a562-c3423e9cb674
 14 2cc8bdbc-e120-849b-bf68-9ce15c2ed12c
 15 8c9339d8-1adc-1920-9258-b99284eba041
 16 aa14c0e6-fe42-28f4-b076-c34ba309bfa8
 17 82dce052-112e-79b3-adfa-7217a8e71150
 18 89cd23a4-5165-1c16-be5c-dc85f917eff7
 19 e2206a47-1ce6-3ddd-a2a4-6bbfd361c009
 20 daa15117-3a61-3419-997a-b21d7280e073
 21 074e0cad-1513-2eac-bd9a-b25eb003f4f5
 22 63cb3cf7-fabf-2910-93b1-580c3c95fbd0
 23 70798f61-10dc-3c81-ae5c-5c4a257335ac
 24 355c2437-5487-17ee-8942-fa3c7e0cb7b8
 25 a36f5284-b786-2562-8834-3cd5672cf4e5
 26 110cd61d-d4ae-20ad-9172-8a5d4629883e
 27 8fb8be98-1cd1-2a16-b8a4-65d04fb30726
 28 7951af7e-907d-7155-b544-e903b38ea09d
 29 719d069e-f65f-6767-821f-c33f9f9fb1cb
 30 5b53db6c-5248-0142-971c-f9a3b6098498
 31 d16d85bb-ce17-7849-b640-5443dec10aff
 32 314f82f3-bdd2-2feb-ade2-9636f0c51294
 33 aa25e93e-7ff6-657f-b5fc-5ebc21e0bbb4
 34 fe6b324d-37e6-517f-9412-9e33ebefce3b
 35 4f4b2a05-c731-6796-816e-d78e7ca5b5f4
 36 4d99a2e2-3b79-8272-baaa-72ea6a9a4ac6

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 248082441746481271332231222760726568. Exactly this sequence comes out of new Random(26).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 11 of Run 36 (seed 335,015): new Random(335015), Next(8,64) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-10 20:54–00:54).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs