A858DE45F56D9BC9 archive

201210222200 11w63i

explained decrypted filler

seed 764

Metadata

Post ID
11w63i
Title
201210222200 → 2012-10-22 22:00 on A858's clock
Posted (UTC)
2012-10-22 13:00:08
Timezone
UTC+9 · title 22:00 against posted 13:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,640 hex characters · 1,320 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210222200) = 7cb40ef6585d6bb77708b40321f45d1f (name+title)
GUIDs
41
Filler GUID seed
new Random(764).Next(9) ✓ verified
Run
Run 37 (seed 425,468,968) (seed)
Draw
20 · predicted N = 41 ✓
Machine boot
2012-10-10 14:48–22:48 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
14 · 1
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,640 hex characters = 1,320 bytes = 165 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210222200 (name+title). Key = MD5(password) = 7cb40ef6585d6bb77708b40321f45d1f, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 41 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3c1b438e-5fd0-7738-b8e7-4062f1a546f2
  2 2436c5d5-520b-882d-842b-ec7e7b505b6c
  3 f1acb85f-fc24-7c67-b42a-ff2743cced06
  4 292932b7-1b83-5a75-85d2-d1ce3db937ef
  5 3cb81bd0-98b7-1658-8287-9444b3b2cdf0
  6 5d64ee80-951f-1a9d-ace4-ba9ede2e17c9
  7 1d31dd7e-c574-1047-a291-6cc2aef23f04
  8 36809f56-22c7-65cb-b06e-3e2fb69675e9
  9 07041fe6-da4d-4902-a3b8-91dbc9aeb048
 10 3a26af65-cfc3-84b3-b87c-928aa62fd15b
 11 7b547c73-6e59-1b7c-82a1-6fd4ff9a44c8
 12 ec5925e8-5fd0-8e5b-95ac-23f9b447ccf1
 13 f263f126-5671-7cf1-aee4-3c1e4e8e5c92
 14 91045d62-c6f0-81e0-a120-f26287a0f7dd
 15 7a2fe3c9-fee5-6f56-b380-725a99cf8670
 16 8e75a7cf-5ba7-12c1-a86e-c515d07d7fe2
 17 96a3c217-5739-0eaf-b74b-71909f59a4b2
 18 5fdd6a63-8135-6a07-b255-6549e1fa288f
 19 b8af927f-a4e0-38ee-9065-54d0740cc6bc
 20 5ed14ab1-2a3a-1356-85f2-b077c540dee4
 21 625ea99b-441e-265c-a3f1-0570593c57c7
 22 639e3f65-f174-2a3f-a7b8-9c03067d495d
 23 43755b6f-e738-1d9b-8e95-df37d4dad092
 24 7725999e-b9e4-8f4c-9f66-e1c8b5c4f2e7
 25 fb2fc193-db08-5b7c-871f-3bb01b0b6665
 26 b4422a26-49fb-8eb3-924e-c2a1259213b3
 27 12ed2d84-6af2-7823-9a02-a344bf8aa6c2
 28 9c93c798-fa5c-0e7a-94a6-da383dec2baa
 29 6ae7187e-49ca-5235-b37a-89ad8f08d655
 30 839371dc-d66d-3c3c-ad6c-7d4793c60728
 31 ef3ab1a7-8951-2d2c-8137-d190fc880ff9
 32 8c721039-efd7-685f-a5a2-cf7866bd81c8
 33 dbab6083-e2d7-42f9-95fa-c9fa7f53e1f0
 34 0c18a8f3-d099-1969-919e-3faa4a3f85fb
 35 92407252-9fe3-345f-a40c-1bf6d0ae4f81
 36 c5d72037-6f9c-79b0-99aa-01d980a395ad
 37 a490ea47-423c-8aa9-b599-0cff76b56e03
 38 df2f53c7-296d-06d9-86a5-01e85ef5ad14
 39 86132bf0-36a1-171a-bdcf-a45736dc21a9
 40 6b7a9e51-3d1b-6ee1-8bfa-4946783182c5
 41 627f0f29-eb5c-0971-b622-33183f05e30a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 78751116481878610631221858705326413780160. Exactly this sequence comes out of new Random(764).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 20 of Run 37 (seed 425,468,968): new Random(425468968), Next(8,64) per post. The RNG predicts N = 41; the post has N = 41 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-10 14:48–22:48).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs