A858DE45F56D9BC9 archive

201210140500 11gdlc

explained decrypted filler

seed 538

Metadata

Post ID
11gdlc
Title
201210140500 → 2012-10-14 05:00 on A858's clock
Posted (UTC)
2012-10-14 09:00:18
Timezone
UTC−4 · title 05:00 against posted 09:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,680 hex characters · 840 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210140500) = dc083b5ea7354411464b8d74649f8383 (name+title)
GUIDs
26
Filler GUID seed
new Random(538).Next(9) ✓ verified
Run
Run 36 (seed 335,015) (seed)
Draw
21 · predicted N = 26 ✓
Machine boot
2012-10-10 20:54–00:54 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
12 · 1
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,680 hex characters = 840 bytes = 105 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210140500 (name+title). Key = MD5(password) = dc083b5ea7354411464b8d74649f8383, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 26 GUIDs as hex (shown below).

Decrypted: GUID list

  1 34f0f8ef-32bc-70be-a343-4baabc718908
  2 9d1d2206-25ee-6ef1-9e87-dc0f8aa4927b
  3 034d3a73-e4e7-736b-96cb-9caa45466356
  4 8689a7d9-1107-30fa-8f1a-39a36f71e524
  5 bc9190d3-6078-0f59-ad44-1d2660245fca
  6 87c829b5-f3e8-6404-ad39-a47f00ce2fc1
  7 06a17286-7267-8c69-9f0a-35fcb9d201c5
  8 bc10ac17-7082-3986-a82a-084cfb4fe57b
  9 0331c605-f978-47e6-b5d2-8d1b147194f0
 10 c4b69788-3412-5b48-9327-4806d43a79a1
 11 ec3e3ee2-1e46-56e0-be2a-69913a935d19
 12 05ab2a57-f81b-4c0c-8881-fe5ecec39500
 13 efceff35-757e-4855-9c80-25c7aae68a8f
 14 6ee5c1d4-6ded-39ad-be5a-7adbcf243482
 15 5915e7a9-3e6a-534d-a732-1e37523d8870
 16 07e69744-5447-0cd7-889a-aa34970b071b
 17 11b293e0-292c-0dfa-b5c3-2f618432766f
 18 6522cfa7-fb70-4616-8af2-0ef82f807812
 19 b9f6a219-7827-252e-a76e-e681c17d61b5
 20 813c90c9-136b-53e2-8b78-f0c2180a2aff
 21 1429ba50-9101-25af-b78c-b5ce4ea1701c
 22 45d1bc42-ffc2-7359-a9fa-a1c12d037866
 23 c676a26f-dfa7-834e-854f-f10d1ff3ba5b
 24 94d26e78-910a-8553-8343-99f93de0bdac
 25 3dcc0a97-f3de-35b1-8d2a-a59c311512b8
 26 2a6c5d2a-a1fe-5b83-a1a3-1b8e408fc8df

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 76730683455443500425278835. Exactly this sequence comes out of new Random(538).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 21 of Run 36 (seed 335,015): new Random(335015), Next(8,64) per post. The RNG predicts N = 26; the post has N = 26 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-10 20:54–00:54).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs