A858DE45F56D9BC9 archive

201211011459 12gzc0

explained decrypted filler

seed 83

Metadata

Post ID
12gzc0
Title
201211011459 → 2012-11-01 14:59 on A858's clock
Posted (UTC)
2012-11-01 18:59:59
Timezone
UTC−4 · title 14:59 against posted 18:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,872 hex characters · 936 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201211011459) = fc9d1b6845de3113efc8be324e093aee (name+title)
GUIDs
29
Filler GUID seed
new Random(83).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
70 · predicted N = 29 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
14 · 1
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,872 hex characters = 936 bytes = 117 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201211011459 (name+title). Key = MD5(password) = fc9d1b6845de3113efc8be324e093aee, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 29 GUIDs as hex (shown below).

Decrypted: GUID list

  1 cf963f9b-c777-0356-974e-7c80e342e02d
  2 1a871123-9067-1f8f-ac23-38627ed801df
  3 7179ce21-9126-72eb-9c7d-c521488029c6
  4 c9991e0a-ebc6-22e6-bf12-45b1a6bd21ef
  5 40be8846-433f-67c1-9ec6-eea93128ffc8
  6 df48b72e-76d7-0eeb-af85-83341d46157e
  7 5a54ebc1-4e33-01aa-95a4-0a835ef82551
  8 6de70bfa-6da8-0b09-a334-5aa73910483d
  9 b0882578-7654-2136-9396-45f165ece46d
 10 ae352cc6-4ca5-7525-9d5f-eb698880d1b3
 11 cb3fccd7-f54a-32df-a22e-5fd10f7ea271
 12 aef2fb4b-c779-2a34-a88b-bc039b44f63e
 13 9fd90658-5506-605c-8234-1a1c01ef3293
 14 28124b93-6aaf-53fb-8745-66cede9c78e2
 15 d953b8c6-b792-06aa-84a3-5848d14f1f1c
 16 0bf5427c-1445-7fb3-8472-c7a26347d293
 17 4dea28c7-ad82-647f-9c04-474fe2c73b5c
 18 ecf5ddd4-8575-402e-b94d-83251c54d898
 19 bb78c3b8-7999-8c8c-9291-02945912ffb0
 20 88bc95c4-ed06-479b-9412-b2065ce3bb9c
 21 8358590e-8615-7da8-82df-d95fc3ff0d10
 22 27421384-1dba-1372-bed0-e45888c2eced
 23 87609268-1bc8-067f-8f17-2624133fa3ea
 24 597d6b7f-cc81-01c0-8488-f0e1ea7db48b
 25 d162d7fa-7cbd-77d4-bec5-4b4fb108ef68
 26 acf07fdd-40f2-8a3a-8e20-19257271a314
 27 1381a064-ca18-2bd2-b65f-1f0e02711b15
 28 6c7e26a9-ee1e-1d78-80fe-dcc4098a6285
 29 0e146817-c58f-45d2-8be5-7c3ac2351968

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 01726000273265076484710078214. Exactly this sequence comes out of new Random(83).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 70 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 29; the post has N = 29 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs