A858DE45F56D9BC9 archive

201210241423 120oib

explained decrypted filler

seed 298

Metadata

Post ID
120oib
Title
201210241423 → 2012-10-24 14:23 on A858's clock
Posted (UTC)
2012-10-24 18:23:00
Timezone
UTC−4 · title 14:23 against posted 18:23 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,512 hex characters · 1,256 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210241423) = 090b52ee28352d3712c7dffe96bcd6dd (name+title)
GUIDs
39
Filler GUID seed
new Random(298).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
3 · predicted N = 39 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
13 · 5
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,512 hex characters = 1,256 bytes = 157 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210241423 (name+title). Key = MD5(password) = 090b52ee28352d3712c7dffe96bcd6dd, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 39 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ad0ccdeb-235d-3d4b-8eac-7aad6c2e69d6
  2 5b33f200-d5de-2051-b091-89b7b3814ce3
  3 7acc3afb-4d70-0e69-a23b-0884e0d48aa5
  4 c808d80e-0b89-17ea-981d-11d6a8d4a3ae
  5 55c25ba8-f220-611b-9ce1-eeb27ece3e92
  6 85407030-4851-8684-ad32-99a522454167
  7 a758e408-e982-348a-b856-52155cd32d08
  8 32fb997a-ac0c-8c0f-a922-92deb5211125
  9 73beb5fa-3632-7e8f-867f-a884d992ca09
 10 c7b2846c-4af0-1930-8f79-dfd6686279da
 11 03b92a51-26f2-7a69-a91f-387da70c536f
 12 c9d1756e-f649-131b-9ad2-80bb2371ba02
 13 958214e9-46c5-4f2c-bc7c-1a1f9ced82e7
 14 122be6c7-7f02-46de-9399-03e96d288b21
 15 b8e7cc7a-a539-547c-b125-c52f78210a9f
 16 8087bbbc-3622-19b0-9025-a38e3270d4dc
 17 b628cecc-2dc2-1bcd-9d3b-9110cd02ae65
 18 9fd3c721-9b37-6589-8a3c-f2d4782f5b83
 19 cf2c11fb-6f71-6618-bab9-e043cc2c38f0
 20 7fd3571f-7aec-6c53-9487-f3f35ce56a0b
 21 54a144b9-0cf4-30a0-9d3d-7137f860bbf9
 22 38a974ca-98e8-88f0-82d7-b225685d0eea
 23 2fb2bb7d-0b5d-301d-bea3-a47737b2378d
 24 97556953-a378-10ef-9ae4-2bdf675b32dd
 25 a2c5b101-7b67-86ac-b0ab-02e3d5c43dcf
 26 6c447d31-756f-1fed-aa82-63e66377e069
 27 1d995e63-e89f-11fa-a8b8-c27b788a9c6f
 28 3b48d463-10d8-2978-adb2-0b4ef49d7b07
 29 d910662a-ebf2-788f-86ce-8aa7da9b153e
 30 e8b8a3b7-6cbc-0268-8005-ace1aeb26b34
 31 895fb0e1-ac07-1a47-9846-1b0386e38080
 32 fabe04ef-f8a0-89db-8bdb-e5511ec04106
 33 8e490369-3964-1110-b4ad-992c55487f31
 34 ddab22b0-243c-4c34-8898-5cd17341c4e6
 35 9b28bfdd-81c1-66f5-b717-37cb4c882fd9
 36 f8263980-e528-6b52-9dcd-c3e473a24c5d
 37 138dedc5-4f9b-7e5f-a367-bbb4f0f1ba40
 38 6a4f3411-017a-4511-af02-91ac167494f9
 39 9e749abf-b2c1-301b-b51e-ef50445b8f5a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 320168387171445116663831811270181466743. Exactly this sequence comes out of new Random(298).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 3 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 39; the post has N = 39 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs