A858DE45F56D9BC9 archive

201211081635 12uksx

explained decrypted filler

seed 176

Metadata

Post ID
12uksx
Title
201211081635 → 2012-11-08 16:35 on A858's clock
Posted (UTC)
2012-11-08 08:35:13
Timezone
UTC+8 · title 16:35 against posted 08:35 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201211081635) = ae71213374ec35a7392ac020e5062310 (name+title)
GUIDs
33
Filler GUID seed
new Random(176).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
97 · predicted N = 33 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201211081635 (name+title). Key = MD5(password) = ae71213374ec35a7392ac020e5062310, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9ea51d73-52c3-61b7-9230-17727038de93
  2 521193b6-b992-4e89-b482-873a62395f7d
  3 c8c03886-a7b7-7145-a415-83dd9ed63013
  4 7380c1c8-9fa5-1b96-9a0b-e716e7775568
  5 7bd4e385-9713-6fab-823a-eaf65b8277ca
  6 c04da3fa-df35-3412-afc1-e086ab8b88f6
  7 9a883636-f49e-68f7-9cfe-c0f6b186ffcf
  8 db2db1a4-f5aa-69b9-83cc-a7f462143772
  9 858ebbcc-b536-6d2b-ac8e-0093a5a7aab3
 10 fe48ea95-bfc5-1c70-b4f8-8c9782251838
 11 3c1a9780-6e82-8948-8cb1-398845cf1f52
 12 047006c3-3692-7a48-9811-f7113cb6fa4e
 13 456a9c59-954f-5e83-9aaa-d5a86627ae79
 14 9dfd1dcd-65ea-09de-9be0-327ad852ff7f
 15 79b0ed94-5bd4-124d-a639-6d1db2f6075e
 16 320d9e7c-577d-83cb-abb3-8f92d291ccbb
 17 7da611bf-ad55-70f0-aba0-aadd80fb61f3
 18 7eccf534-9362-1776-9f11-1bab3058042c
 19 89bd0443-8b2c-3b78-badc-c6028a328423
 20 ecef8ccf-27d7-4ae7-ab3f-0a9bcbcb468a
 21 ac26c000-dbba-1e4d-a363-d19b98e41029
 22 a261bc45-749c-0ccf-a151-eb05ec17c551
 23 deffc64d-5689-6cf6-85c8-dcd8f5b9e249
 24 f8dbcde1-1c87-4dee-9d2a-0f3be6a9b07c
 25 fcb0cf44-7607-8354-958f-af07810534b6
 26 13326291-2545-6023-94db-726c77f58241
 27 b8926a1b-1912-2309-bd3a-6267ad1b974e
 28 dff1895e-592f-6fc5-8765-792775d7f1d8
 29 5bfd7f39-7f76-168b-95c6-fe36364f7253
 30 dedddcad-7c5b-7350-8c6d-6c9cc27ccef9
 31 574bffac-dc26-1ce3-9f86-d83fba2b0ed5
 32 c33dad8c-1580-7674-9fe6-95b34b4fc85a
 33 70194edf-83f6-0309-8117-07571421689f

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 647163666187501871341064862617170. Exactly this sequence comes out of new Random(176).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 97 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs