A858DE45F56D9BC9 archive

201211082035 12ur3z

explained decrypted filler

seed 904

Metadata

Post ID
12ur3z
Title
201211082035 → 2012-11-08 20:35 on A858's clock
Posted (UTC)
2012-11-08 12:35:31
Timezone
UTC+8 · title 20:35 against posted 12:35 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,640 hex characters · 1,320 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201211082035) = 26ce6bfa06a591d1d47c885f927c8ce9 (name+title)
GUIDs
41
Filler GUID seed
new Random(904).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
121 · predicted N = 41 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 6
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,640 hex characters = 1,320 bytes = 165 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201211082035 (name+title). Key = MD5(password) = 26ce6bfa06a591d1d47c885f927c8ce9, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 41 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0c2eff95-a7aa-843d-8215-969b73974590
  2 14512c7f-83d4-05a3-ab7a-f605fe84636f
  3 29e040ea-0418-5c2e-b960-93faed68b406
  4 379cc9a2-83f4-4ba6-8da4-4cc24a8cb369
  5 5eee09d7-4b59-3c4f-b27c-e21bac48579a
  6 0676a6d1-8e71-5724-82e1-dc849d6ccdc1
  7 7a4eac32-15e3-89e3-8725-e81124e21c09
  8 23376caf-3730-8f64-8ac8-672c7fb99b55
  9 0ec3e29d-c4a5-7476-9393-9e62adad3d22
 10 6a489c84-9849-5d5c-b966-458bded7b609
 11 2fcf6d32-5dc9-2b60-a912-5965be03e2d7
 12 74781f00-fa49-2f1c-a848-85232ad5ca6a
 13 e7d25bf2-cf11-0aeb-9113-989845c4dc1c
 14 e87d46df-f1a2-7334-9f7d-53db588599f3
 15 26cde095-2dab-6c18-91a1-5427dc73b8e8
 16 d3f7b4a7-c000-5cae-9b73-5a6070433777
 17 c49ebaad-8438-7330-b57a-627a261e594e
 18 63d5cf74-c488-474b-b38a-b478a624019c
 19 c0634908-b1c2-1d3d-aa4f-05920f3b36aa
 20 daec500a-adbc-3a7d-a2aa-8a5d38fc2aa6
 21 68843204-a5d8-8ed9-b2b1-b6ee4c45ba97
 22 5433750e-9398-5cfc-82a3-1bc0d7f6373c
 23 4cd5024b-70bb-6b01-a8bd-b6053497d5b5
 24 885e0cd4-4f1f-7291-bfe5-d27846f23ddc
 25 93b62f69-f289-2b63-9832-cc263e31ca49
 26 315e0a6f-0ce9-8322-b761-4a722b9a79de
 27 126b9b95-c227-1c63-99fa-874d421dff56
 28 ff0d54a1-0504-7f4a-88ec-54a869dc60b8
 29 32a6d77a-2c98-2645-83f8-ea1446df4863
 30 1af98cdd-8996-15a7-ad89-89b123aa3d70
 31 2510b3a6-75de-8d68-9c59-534d19dcb0b0
 32 631f502b-0968-55d5-9298-28b0ae0e5168
 33 61067ee2-9479-7f04-af0c-fb3d4fc2a046
 34 ae0faadd-fc35-530b-8481-45157a5fe8b2
 35 b585df9a-2300-27c0-81e1-437091e2aca2
 36 7307d869-e518-8ef9-9d75-1d3c15e04275
 37 5b185d6c-4ae7-7b2d-b86a-b5ff9b3d4d24
 38 1073ff88-2cf6-42af-8e8f-51e2d5b32a01
 39 f2de921d-36e7-1248-9bb2-d28117c28352
 40 dc2d19ef-ce89-2ca5-9527-d9d1f3e9f4c0
 41 69092c91-0f16-42fe-ad70-f951eac5c597

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 80543588752207657413856728172185752874124. Exactly this sequence comes out of new Random(904).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 121 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 41; the post has N = 41 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs