A858DE45F56D9BC9 archive

201212031814 1487f1

explained decrypted filler

seed 170

Metadata

Post ID
1487f1
Title
201212031814 → 2012-12-03 18:14 on A858's clock
Posted (UTC)
2012-12-03 23:14:05
Timezone
UTC−5 · title 18:14 against posted 23:14 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201212031814) = e81fbd817e15943af7bc8e2aabcfcac8 (name+title)
GUIDs
33
Filler GUID seed
new Random(170).Next(9) ✓ verified
Run
Run 39 (seed 1,106,402,812) (seed)
Draw
7 · predicted N = 33 ✓
Machine boot
2012-11-20 22:02–00:02 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201212031814 (name+title). Key = MD5(password) = e81fbd817e15943af7bc8e2aabcfcac8, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5668e096-fc63-480a-ab51-39d4859ec428
  2 76adb6bf-a83a-6a55-910b-c33cc0c4bd84
  3 d83a016b-9a72-576a-99e5-927efababf19
  4 d44b84eb-25b5-79b2-9a6d-d2447d8afc77
  5 22f8c6b7-2884-8b7f-9417-7e48f107f905
  6 2804745b-38b6-1b7f-b786-b89414e0126a
  7 b46b5eea-04bd-0246-92c0-e48a3e355b0b
  8 a3e8af01-393e-6cc5-a790-c9e219364bbc
  9 4bf8e563-48c3-0a12-aa3f-9d6fb0bd57a5
 10 99c7588d-eacc-8af9-ba36-2e48532f8728
 11 7f473acd-52cb-420f-bef8-2d3616c6f75d
 12 818afb6d-b48b-178f-9098-847a1a199d86
 13 9e3250f9-991d-40fc-8bbc-2e18261ebaea
 14 2b1b1959-b918-8748-958a-f56507dcb6e1
 15 84681f62-4003-8c31-8b4f-33a454624254
 16 9b53a1ae-fb35-10ed-bcbe-68449514d52b
 17 dfb082da-f0c7-2019-8d64-8d342bfda14f
 18 cee2cad1-e46e-3f49-900d-40228330830c
 19 cf519415-c2a1-247f-bdc4-26007b52c912
 20 add37898-07bb-14fa-8cdc-7a8b85827cb4
 21 1af3a1c6-5924-36e1-a665-12be393a44ff
 22 91fb8027-5d1e-4452-9bda-429c9b1dad12
 23 febd8d07-d20d-6ed6-8637-0355430a7ee1
 24 de3fbc04-9a04-30ee-8924-3c2e85af2d9f
 25 9a2bf448-0ca1-3c7c-8f26-dfbb4b2e22e2
 26 ac2205c6-9774-776b-a782-5a94b847d11d
 27 73aad81f-768e-095d-8b68-87703625b83d
 28 36a78608-ea76-0202-8dc3-3d0620188700
 29 046c360d-4795-4a39-a725-68270971b46b
 30 1fead422-221d-80df-a674-87a83d30facf
 31 c99a98e7-6cbf-826c-a505-0a0e80dc9cbb
 32 dfdebeeb-3a67-2dcc-91ed-854068253551
 33 f404b074-db83-54a8-9b1f-064a18d4e03d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 465781060841488123213463370048825. Exactly this sequence comes out of new Random(170).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 7 of Run 39 (seed 1,106,402,812): new Random(1106402812), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-11-20 22:02–00:02).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs