A858DE45F56D9BC9 archive

201211081314 12ucxc

explained decrypted filler

seed 803

Metadata

Post ID
12ucxc
Title
201211081314 → 2012-11-08 13:14 on A858's clock
Posted (UTC)
2012-11-08 05:15:00
Timezone
UTC+8 · title 13:14 against posted 05:15 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,448 hex characters · 1,224 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201211081314) = 6f0de66851907648dfbd0951eb6f0ac6 (name+title)
GUIDs
38
Filler GUID seed
new Random(803).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
77 · predicted N = 38 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,448 hex characters = 1,224 bytes = 153 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201211081314 (name+title). Key = MD5(password) = 6f0de66851907648dfbd0951eb6f0ac6, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 38 GUIDs as hex (shown below).

Decrypted: GUID list

  1 bcd83318-00cb-2dca-8a79-79f6badba1ba
  2 62a809f9-8d76-3e7c-a9db-9bfe7ad83ab4
  3 ee7c7355-d832-0300-bbbb-199d977cab0e
  4 780e31e1-fd31-8250-84ee-def932119776
  5 f6fccf63-1125-6cf6-a317-86b0a31c8435
  6 c0d020d3-15eb-2a69-80a4-a7bc31daca85
  7 fcde4aa8-046c-6a53-ad78-d6712ee50c50
  8 446bc18a-0579-26d6-a896-6cadeee9d23d
  9 6b18dedd-f9c3-2515-a2e1-93aec7b201a7
 10 5a3c5877-1dc0-309c-8605-4b804db465c9
 11 60aa0fc8-14aa-7a5c-8cc7-bed4aa68144c
 12 f5c73426-8664-38bb-bac8-44c5facc02a5
 13 70253722-aaa8-5723-8b9b-83de2d47582b
 14 9124ba74-de4b-27fd-b58c-70d89490e2e2
 15 a6f40c5e-7c1f-0c06-bec3-b1845a1379f5
 16 08e67b33-a53f-4ab2-9081-06ebfbe22cc4
 17 4ab0d68a-4e01-3104-90ae-447af1675007
 18 95f0bd4a-88d5-7ac6-8d3e-d9cde7d53bb9
 19 795f1dfe-615e-3449-bae1-f6261643b3f4
 20 44e70013-65b3-23e8-b3b6-23dc0e3acddb
 21 daca05ba-e741-4604-85c1-0c39a5bbe2d7
 22 c3b74414-7b56-73c1-a2db-2aa8f9f7a0b8
 23 f9ed675f-42f1-648d-bac6-73831f318533
 24 1e947901-f09d-50f3-8fcc-dee9b8d53e98
 25 94e79a95-a02a-32c0-a39c-6a10529da5e1
 26 9951fce1-7112-05eb-a46f-35ae42567cbe
 27 7aa74223-72e3-2fd7-8f35-77af8295d3bd
 28 d04fcf7c-5220-2fa9-89e7-87b00c9358b8
 29 c7244a2d-ffe0-302f-be4b-e35dd50d3573
 30 17695f21-ff1e-72b9-a4b8-4fe3ceb3b375
 31 0073bcb5-79cf-5b9c-8715-f77912a57b1c
 32 399f480b-4fbc-8af7-9b02-8308fdb0e0d8
 33 0bd6c4fe-2144-13c0-9d21-d7c31342b17d
 34 8dd7bc14-87f5-1a12-b898-2233d628d1d9
 35 0296a29c-b377-0945-bc20-78f21b55df6b
 36 5f4a6fad-3e2d-532e-8224-2ef36a3d7b71
 37 699c0bbd-3cad-1c2c-b0a7-e545d0ba27cc
 38 539f8a28-2521-59b5-89c1-671da895e034

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 23086262237352043732476530223758110515. Exactly this sequence comes out of new Random(803).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 77 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 38; the post has N = 38 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs