A858DE45F56D9BC9 archive

201211081625 12ukj0

explained decrypted filler

seed 235

Metadata

Post ID
12ukj0
Title
201211081625 → 2012-11-08 16:25 on A858's clock
Posted (UTC)
2012-11-08 08:25:13
Timezone
UTC+8 · title 16:25 against posted 08:25 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,640 hex characters · 1,320 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201211081625) = 5aebfb432c9f7731f1cbdcced3f05cfe (name+title)
GUIDs
41
Filler GUID seed
new Random(235).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
96 · predicted N = 41 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,640 hex characters = 1,320 bytes = 165 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201211081625 (name+title). Key = MD5(password) = 5aebfb432c9f7731f1cbdcced3f05cfe, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 41 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c71f3af4-c3a6-4800-9d28-2b3a0cae913a
  2 814a7f42-92ed-63bc-91e6-19a39f728433
  3 9a3ece55-2e67-0e79-9202-8ec3eef58150
  4 2956da16-57c6-6560-a661-c24e9a4ba024
  5 4948fc0d-5a13-2682-86c6-db07a28feed2
  6 e7942ca4-ca17-8f6d-a160-efd857209b15
  7 d3c19f5f-c238-138b-9381-05f6966a7fb9
  8 82c99555-40e5-3233-97f9-fdba87667cab
  9 54ddc61e-cd95-0ad2-adbe-78014ebbd02e
 10 3165d9f1-4c27-8967-ba7f-56c04ae11890
 11 c70c14c7-c47a-397f-8e88-a44379610c9b
 12 1cdec229-c716-8397-8cb8-ef542c346ad0
 13 353648bb-731f-1b55-bc76-c7c0025649d6
 14 4bb2e6ce-dd9c-61be-834d-b48fd77b4490
 15 7cb23296-8f77-47b1-a4a5-9a026ec746bf
 16 786b1d77-464e-7cb4-9997-94d6fce66c49
 17 ba5e158d-3938-53db-a552-913b9c9dc86b
 18 44b21a03-4276-63e3-a6cc-bd36712f5d43
 19 aaced3c4-d00a-06bb-8278-e03c59466567
 20 3cff10e7-01ac-215e-9aa0-a4dd298bc520
 21 8c63bb0b-20af-0343-8aad-41e2c6f43dbb
 22 c76c0c88-9c23-4010-aa11-24319f8d58cf
 23 29e43db3-4501-67f5-8548-ef5b75ad5512
 24 be009678-912e-1a9e-8ac6-4e7234f76d6a
 25 b83bb0b8-2d4b-6abd-b409-c17946c80983
 26 ebd253f1-457a-67df-a16b-42743884aff2
 27 9765fad4-d454-8ec1-a0a3-8ae4a79c9774
 28 d0a1cb84-2857-216d-a8b3-55f195ede565
 29 c0095869-4f5f-4880-9095-3d2899b107dd
 30 6d1dc31e-ef04-34b1-948c-28dd4ce3771d
 31 260b82ff-cc9d-81f5-a440-2f36d2e5da32
 32 16341f8b-2238-3fe5-9545-d6b6d7c76367
 33 f5a6810f-5568-7afa-8597-6ebc3d78159c
 34 c9de2b11-dc14-7248-8340-ddc5857ea0e6
 35 b1d4f2e5-85d9-6ee1-a103-ecce889fb162
 36 8b506010-0717-8ac0-8372-c813e32883be
 37 8fe68948-0d84-6691-a0e0-b258a0330463
 38 bec64672-eaf2-4a3e-abf0-f3d67876e164
 39 0748b214-8704-596a-a066-1cbd9d6105fa
 40 5ef230f0-899c-3556-9701-9513304c93f5
 41 9560c3b5-6b61-875d-a42d-ad5fa60beb1f

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 46062813083816475602046166824383776864538. Exactly this sequence comes out of new Random(235).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 96 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 41; the post has N = 41 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs