A858DE45F56D9BC9 archive

201210172200 11mlml

explained decrypted filler

seed 803

Metadata

Post ID
11mlml
Title
201210172200 → 2012-10-17 22:00 on A858's clock
Posted (UTC)
2012-10-17 13:00:03
Timezone
UTC+9 · title 22:00 against posted 13:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210172200) = 04dc40d54d6ca517cd35cb5d1b4fdf09 (name+title)
GUIDs
36
Filler GUID seed
new Random(803).Next(9) ✓ verified
Run
Run 37 (seed 425,468,968) (seed)
Draw
5 · predicted N = 36 ✓
Machine boot
2012-10-10 14:48–22:48 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
21 · 4
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210172200 (name+title). Key = MD5(password) = 04dc40d54d6ca517cd35cb5d1b4fdf09, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 6936a40f-c99f-27bf-99f2-645b1b1c1b35
  2 4e611af3-a881-3b78-8923-399bc1c6ef09
  3 f2895199-a619-052e-80d5-49b93531ace0
  4 7c9713eb-0e4f-8f46-b5d3-45213ab622e2
  5 0bd688d7-4fb2-6d23-b83e-fb6d07db4015
  6 436d180c-e0a1-23cd-a6f0-4973f1a37199
  7 1a9c59ac-682d-6230-9d9c-a4b07ff77046
  8 4e96fb7d-4425-28de-a9d1-4c60d226018f
  9 b8352527-62fe-2c33-914f-3aaf223caaf6
 10 b193edad-698c-3ec0-8757-6400aa6fe8b7
 11 6e2fc834-9d28-7506-ad3c-3966fed5d28b
 12 661eebfe-3379-3936-964c-faedf82b7ca7
 13 077840d5-7a61-5baf-b497-452ea2258d91
 14 d2b9d1e4-2568-2f36-acfc-ee1c06c97600
 15 0979ce79-32ff-019a-bd0c-50615abe8635
 16 0bc9ce52-0a0e-456a-b821-f8a2da5a15fc
 17 a87b7c73-a919-3ec7-8912-0e90af72ac43
 18 5a656e6e-a727-7b9d-a062-2464fb5256b2
 19 3eff8cad-c257-36e1-a3b5-71a07b4911dc
 20 c2906a3c-0ae7-2e6b-ba90-170a7ab7b88c
 21 b70dd7a6-b432-4aae-9fa9-f907fdedec91
 22 944a938b-7a0e-728f-9e77-6c982bbba469
 23 642d5e26-118b-639d-b57d-da8eec0f62f7
 24 96739c73-d26a-558c-a63d-2be75ff98f25
 25 008cbde4-bebb-3099-8982-74f04a462c79
 26 92024ed3-c0aa-00d3-86d3-a96d2b4461f7
 27 453b4b00-609b-2e33-83a2-d701d22c4c1d
 28 e04cc0b3-4132-2d3c-9e41-c281039ca333
 29 3724245e-fdb9-3c97-8d53-7be663d48906
 30 5a1032c2-2e0e-76e3-9000-ae3574858c04
 31 94b932d5-f923-5246-bdad-613c0e6b7aac
 32 7e3acfe0-1ae9-869a-bc20-a6fdb6d12349
 33 dad559e5-8561-1b13-9914-c5886d121a3f
 34 f85993c1-f5d9-1281-9276-9067b012cadf
 35 f4bccec5-5880-01be-9b61-685ab9e54779
 36 2dd6b4ca-d352-5f01-9738-453536d4c740

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 230862622373520437324765302237581105. Exactly this sequence comes out of new Random(803).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 5 of Run 37 (seed 425,468,968): new Random(425468968), Next(8,64) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-10 14:48–22:48).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs