A858DE45F56D9BC9 archive

201210291459 12agbb

explained decrypted filler

seed 514

Metadata

Post ID
12agbb
Title
201210291459 → 2012-10-29 14:59 on A858's clock
Posted (UTC)
2012-10-29 18:59:59
Timezone
UTC−4 · title 14:59 against posted 18:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,448 hex characters · 1,224 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210291459) = 9a5e9832ea0014c78dd20568c04724d9 (name+title)
GUIDs
38
Filler GUID seed
new Random(514).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
67 · predicted N = 38 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
30 · 1
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,448 hex characters = 1,224 bytes = 153 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210291459 (name+title). Key = MD5(password) = 9a5e9832ea0014c78dd20568c04724d9, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 38 GUIDs as hex (shown below).

Decrypted: GUID list

  1 f5efaa58-19cb-2d03-8e17-f6e432258608
  2 25177af8-8bf1-5d79-942b-2aef280aa2a0
  3 3dcc938b-c7af-047c-b071-4c17509661ab
  4 a39e8a03-39e5-2f12-a344-b26112031e99
  5 bdb49359-945e-2aea-8761-f6aafa6ae1d6
  6 ed07f0a5-6597-65a0-8dc3-86641959c7df
  7 672ce1bd-385d-1d65-b6c9-bdc01326985d
  8 6ab46975-fa41-2916-aec7-f2a99a0256da
  9 739b1526-c05b-589f-a39b-c010beda0ab9
 10 cd54e1ab-d108-7842-9bb6-0533682faed7
 11 43ff1ad8-e49b-84bd-9155-f600f59e664d
 12 be9732cc-1f8a-67e0-83c6-03ad2433a2c6
 13 e761f3fb-5e6a-87e6-8808-63242ceb991d
 14 6de41639-fd47-7027-a70c-aef9aa2d4b51
 15 c1cef8d9-59bd-6c98-87e7-c60decbb9361
 16 e796a6cd-3ce3-0dad-adad-e7c5f83b9348
 17 061ff15f-a3b8-87bf-b1b7-130dec17d01e
 18 cfd936df-840a-60b8-8fb8-9c82fa495e5f
 19 2a2e83a2-73cd-5a72-ae4d-70bb3a8d195e
 20 b801bc8f-069c-3968-9673-53800cff55ed
 21 681e0b7a-29a9-1529-be69-2d1bb0f7cd77
 22 5b6047b0-6f32-8192-b701-9e9f4832e8cd
 23 0c3aa754-a398-73c0-91eb-2f15ab01bf31
 24 8630c0c4-90ed-55bd-89d9-512e5bdde810
 25 2cd44f80-9c5a-0ce2-a5cb-04b6d664c91d
 26 81ee7cd6-db53-18ed-89d5-80cf8e8955ef
 27 34b1594f-42a2-7210-b9d4-734b9c42f214
 28 012a850a-bd6a-108f-b74f-f04e656a7c9e
 29 54c4b0f5-8ff4-4e55-8b49-4b0f4d9a5c57
 30 df01d423-9a96-0456-94e2-8fc6873bc63b
 31 f37b936c-13c9-886f-9b8f-4012cd4da8c6
 32 eabf950a-4729-7e1e-ab6e-9eaac35a0362
 33 76c03bbc-a53a-82c4-90e5-d87f88b904a8
 34 309dac02-0d3f-7028-ad1b-49969f8f8898
 35 1653474e-c77b-10ea-841c-08c7d8291550
 36 cd3f42c0-36e4-0adf-9e70-8f876e45c798
 37 afbf5943-1db1-7b1b-932a-46e4bfe4ce5a
 38 46fc7a4c-98e7-676e-b917-8bb1cd27e353

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 25022612578687608653187501714087871076. Exactly this sequence comes out of new Random(514).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 67 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 38; the post has N = 38 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs