A858DE45F56D9BC9 archive

201210140100 11g5yp

explained decrypted filler

seed 181

Metadata

Post ID
11g5yp
Title
201210140100 → 2012-10-14 01:00 on A858's clock
Posted (UTC)
2012-10-14 05:00:18
Timezone
UTC−4 · title 01:00 against posted 05:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210140100) = 130df840c71cb076e6c82bfa2423a572 (name+title)
GUIDs
32
Filler GUID seed
new Random(181).Next(9) ✓ verified
Run
Run 36 (seed 335,015) (seed)
Draw
20 · predicted N = 32 ✓
Machine boot
2012-10-10 20:54–00:54 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
15 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210140100 (name+title). Key = MD5(password) = 130df840c71cb076e6c82bfa2423a572, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0b608353-cad2-25d3-998c-c4ca56f6e2e9
  2 27536b99-386f-82aa-970e-8dfd4da64dab
  3 29011276-69a0-223c-8157-65408819c6d7
  4 b101b22b-e26e-19af-91ac-1919af60ec75
  5 841e5009-2caa-8342-b1d7-a9e4ecfe6372
  6 6f825872-a98f-6451-9f4c-cc8814143743
  7 cf1748af-a410-0c70-bfdb-bf11861a0367
  8 f72722bd-9281-26aa-9178-8aea3d266a73
  9 8e224dd0-95a4-36f9-b536-c7712667cbf2
 10 ff9d2957-069e-016b-92de-de547a106d1f
 11 a674a0f1-ffbf-5697-8a78-67461cc593b5
 12 839d50f7-bf34-6a88-a3a5-e12eda2eae40
 13 e6fc88e4-d662-07f6-ba2a-f2a3bc36f088
 14 794331d1-93d5-55b2-8d95-2cc7ba18e0c3
 15 35b9c9f9-8d5d-697e-ae1d-e2b2c5f5bdea
 16 d01ab6f8-3284-019e-91fd-2b1fe87a4b55
 17 2fc7e623-0156-87cd-bf78-f3ad71592c5e
 18 73d33f0d-9b23-1e79-8e87-292b55d6d445
 19 a3999a82-e12c-56d4-a329-c4089f37520a
 20 0723fc56-ac74-331c-b4b9-27867f7f0ef8
 21 cad80eed-fdd8-7d42-a58b-b3c917ba2e81
 22 3975ebb6-7a9d-2b51-977a-21339ab27b6b
 23 5496cfc8-ae6d-5765-b71b-87f6a88dc8e3
 24 37ed2063-1052-2d3c-bb8d-d7cb98609ff4
 25 047ffde7-2664-380f-be39-2a464bbfe067
 26 d412dcb1-951d-88ac-8f10-7ceb6aa6ebb6
 27 72e99c35-34e7-4050-a7d8-51ef56516bfc
 28 cee15d4d-d088-72f8-9930-e0f1c341a4ef
 29 61c89912-c9d2-484c-87ef-801c3f39a04d
 30 18811450-18b0-7149-9c6b-89825cb63e29
 31 e1ddec50-35b4-0186-b6e4-b86e29e263e8
 32 189144ae-7cc6-11e6-8d15-4d44be5710c6

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 28218602305605608153725238474701. Exactly this sequence comes out of new Random(181).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 20 of Run 36 (seed 335,015): new Random(335015), Next(8,64) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-10 20:54–00:54).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs