A858DE45F56D9BC9 archive

201210181400 11ob4u

explained decrypted filler

seed 297

Metadata

Post ID
11ob4u
Title
201210181400 → 2012-10-18 14:00 on A858's clock
Posted (UTC)
2012-10-18 05:00:03
Timezone
UTC+9 · title 14:00 against posted 05:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,512 hex characters · 1,256 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210181400) = d22f9ba873fe57b25afcf3d4bb39aa48 (name+title)
GUIDs
39
Filler GUID seed
new Random(297).Next(9) ✓ verified
Run
Run 37 (seed 425,468,968) (seed)
Draw
7 · predicted N = 39 ✓
Machine boot
2012-10-10 14:48–22:48 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
16 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,512 hex characters = 1,256 bytes = 157 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210181400 (name+title). Key = MD5(password) = d22f9ba873fe57b25afcf3d4bb39aa48, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 39 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9e92ebc0-2eb4-7701-a0e8-cb3dabaedad8
  2 b9614ba9-2256-8606-aa3f-d453be619558
  3 e90f427f-8f23-359d-9a45-73b6c3bdde53
  4 f2a6bf66-55ad-8dbf-a6e6-db4b8aeb57a9
  5 7c70afba-5ebc-2c2e-a5de-ca5ff37f1dc6
  6 382fd076-467d-02b1-b290-3e8a6c1dc6d8
  7 f3f5dd66-3bf3-8977-b710-641215947958
  8 7ef7c7ef-7806-3cb8-ab3e-52f9d1e0af77
  9 3b727d97-ce15-6d72-a7a6-69d174d21764
 10 446c4394-642e-7ba1-9b32-5140b4b2fdef
 11 4d01a8d3-b9be-0e70-8652-279e103c9b8b
 12 bd6defbc-2da3-3a31-a130-fed3821a60f3
 13 14bac2b0-aae4-716a-ba7b-8a2987943e98
 14 0bd18317-2258-81a6-a7a4-7e44f1618636
 15 ecb4ad76-905e-7d03-b52d-0f0dbecb57ed
 16 9db21bf8-dbc2-4f00-b015-00616de9cc5d
 17 60856697-5a8c-6058-87d9-1c9b55308de1
 18 180f835e-aa01-18a5-b858-132bb8370268
 19 75845e1d-18bc-673d-9824-e87d98e5bb0d
 20 8f393f38-589b-2d66-a931-60758795d80b
 21 6f57b54e-2f32-26f2-8a2d-ff67a73ecb8d
 22 1490fe61-a1c0-6254-810f-0215db2dbcdd
 23 f63a0bbc-305f-13dd-b737-cd4e3fe68768
 24 5c703ad5-c54d-78c0-95b6-3ea81f686921
 25 c9c90713-8c73-7d7f-96b1-a4f647d2033c
 26 c01c121d-8843-471c-836c-d326a1afaed0
 27 9fd566c5-64e9-24d4-a6bc-296e1433f2a4
 28 893adc01-be0a-68ef-b5d6-7ef3ecd1b9c2
 29 14368813-441b-51ad-ac8e-110bdcb23d0b
 30 75c520ee-4b51-274d-b119-df5084e540d2
 31 22522c2d-71b5-77b8-be2f-324bbc9855e2
 32 3a967a34-dc88-60df-ba5d-cde1c21c4daa
 33 d4707540-6aee-6e25-8338-adb81846b63d
 34 84f6b60f-c3fd-3b9e-9aa2-223fdd83ac19
 35 74781102-dab6-3aca-9232-5adc28e22366
 36 65644ff2-e198-502b-8ab9-b73bb5aa7ed3
 37 cb186140-f86b-0f1a-ac1d-9a957f6d62c1
 38 7634b710-0634-778d-b61d-cd84ef42142b
 39 6c1b4e7c-e433-1b9d-9d5d-b895d4529f2d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 783820836703787461622617742652766335071. Exactly this sequence comes out of new Random(297).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 7 of Run 37 (seed 425,468,968): new Random(425468968), Next(8,64) per post. The RNG predicts N = 39; the post has N = 39 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-10 14:48–22:48).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs