A858DE45F56D9BC9 archive

201211071359 12t7j0

explained decrypted filler

seed 531

Metadata

Post ID
12t7j0
Title
201211071359 → 2012-11-07 13:59 on A858's clock
Posted (UTC)
2012-11-07 18:59:56
Timezone
UTC−5 · title 13:59 against posted 18:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,680 hex characters · 840 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201211071359) = 64fcfaea315306a48abad5a628a45c9c (name+title)
GUIDs
26
Filler GUID seed
new Random(531).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
76 · predicted N = 26 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
15 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,680 hex characters = 840 bytes = 105 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201211071359 (name+title). Key = MD5(password) = 64fcfaea315306a48abad5a628a45c9c, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 26 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d95ed57a-f053-175a-a570-ee344a95e78c
  2 f5f13a4d-2571-5273-8e26-c951bbf4955e
  3 b74c33cd-b573-809b-a2ce-e2301a5ee5d2
  4 5663d903-3b4a-8700-8927-a5ca35030567
  5 815a2203-9c5b-8a6f-87e3-382076e6bee5
  6 44197459-892e-5bb4-9264-d8445f7cb273
  7 aa150818-2f60-70a3-a6ab-e155ff1ac6cf
  8 02f9dfe4-4cdf-7b68-9068-28d5f7a8c668
  9 1a078b12-44aa-6245-a47b-82ca75327a66
 10 eaeb150e-4334-07f3-ba12-8f1989123e56
 11 c9f7f79e-0286-4974-b545-e9d0407ff414
 12 91ba61b6-be87-0a9e-a3d9-079def7162e9
 13 5360f4cf-767e-6ea9-973d-a3a3f2b367ca
 14 965cf6a9-c136-6cfe-9faa-9f07d809d1e5
 15 4c740395-168b-6ad3-acb6-755987c7e46d
 16 a0041e78-0abc-5457-ae28-7e344b180d7b
 17 cc9da105-05bd-0390-9c89-c17001f3d15b
 18 2e9c1b48-1747-1d35-848d-13556eaa9656
 19 5ad6a212-458d-09a4-8f7c-4a8269c256a4
 20 2e156b9e-7a39-8f6e-8a2d-bb2241aa2273
 21 0c7191fd-0f3a-36eb-9adb-2c3d9f69e927
 22 462de47a-543c-1321-9fa6-72f7369d1610
 23 b7c38926-5c59-6549-b5eb-0b939904cf89
 24 226257fb-b6b4-40c2-83c6-0365197f5f37
 25 f7352adf-396d-6c70-8dcf-3077fa4491e2
 26 28179d2a-c468-0f95-83a2-d91ae80c2678

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 15888577604066650108316460. Exactly this sequence comes out of new Random(531).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 76 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 26; the post has N = 26 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs