A858DE45F56D9BC9 archive

201212040441 1497i5

explained decrypted filler

seed 343

Metadata

Post ID
1497i5
Title
201212040441 → 2012-12-04 04:41 on A858's clock
Posted (UTC)
2012-12-04 09:41:17
Timezone
UTC−5 · title 04:41 against posted 09:41 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,384 hex characters · 1,192 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201212040441) = 92e13693d10d1ab3ff472ca8894c7944 (name+title)
GUIDs
37
Filler GUID seed
new Random(343).Next(9) ✓ verified
Run
Run 39 (seed 1,106,402,812) (seed)
Draw
26 · predicted N = 37 ✓
Machine boot
2012-11-20 22:02–00:02 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,384 hex characters = 1,192 bytes = 149 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201212040441 (name+title). Key = MD5(password) = 92e13693d10d1ab3ff472ca8894c7944, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 37 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0405eb8e-bc0f-88c3-89ae-43808d4a5052
  2 37b6a104-8f24-44c7-9243-069e831e3a83
  3 5e45f70f-47bf-4111-ad5e-8985b4f813da
  4 7d075104-7f84-61a1-8588-669d10115747
  5 74a1bdcd-8ee3-07f2-a801-4723da5428a3
  6 270d913d-e8aa-2955-913e-217cf265e30c
  7 7945e538-f3c6-56a8-88bb-fd4f3336caae
  8 f3558949-56f6-4e89-aabc-36452522cf46
  9 f660b487-7876-3376-83a1-767689324728
 10 7d37c726-6457-647b-b4d6-52b052eb569c
 11 c4db61a8-3f64-8318-85c9-1c0b381238c2
 12 4dfdaee5-d1a7-2c12-a947-f3770cac81d1
 13 80a25cd3-383f-3cbb-8c29-fe26621027d8
 14 9de5bf19-f6da-8296-97b5-d74b7c3320c5
 15 36b8bd2e-900e-0b7b-b1ad-34d4effde62b
 16 e2e98055-6580-2633-9c63-2950bdbbabd6
 17 57d380f9-5695-00a6-80a6-4ab730d150f2
 18 e567144b-f880-58b3-bf0b-1c40711cb87d
 19 15c381bd-c938-81e2-b652-8f77f619e377
 20 749be1d8-9394-1561-aa65-d536b281829a
 21 b5bc551c-0488-3bfa-95a9-11d116f5e230
 22 7d504f6b-021a-8bca-b2c0-5d2cfc5f1afc
 23 8db120c3-ff4d-8513-b59f-e4b6eee2ef08
 24 854b610e-290b-737e-af5f-4e3e156895dd
 25 e5531613-47ec-276a-aadc-836224acec96
 26 619e2ec7-d89c-16ab-8543-57ef008ec993
 27 c27ce209-f538-757c-99a4-93eff068b2e3
 28 c47517e8-8a7c-1c1b-b832-b06fe83405c9
 29 f5a05294-62f2-2071-93a9-43798ca766c8
 30 36fe6f48-25a6-29d0-953d-b1f1d2922cd0
 31 00059dc4-c810-77e6-8ff2-10667f551063
 32 f061374b-dd65-759c-9200-f091ac20a118
 33 b4f00295-18eb-2628-8629-7c7ae12b6d62
 34 8e4bc780-cc05-567d-b4ff-f554dff406a3
 35 ff8dbdcb-bb87-3998-834a-3ade0c6d42c0
 36 d1f06baf-3095-56d5-81dc-2dddb4d845e1
 37 04f703d8-c098-1203-b13e-31495c83b52e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8446025436823802058138872171227725351. Exactly this sequence comes out of new Random(343).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 26 of Run 39 (seed 1,106,402,812): new Random(1106402812), Next(8,64) per post. The RNG predicts N = 37; the post has N = 37 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-11-20 22:02–00:02).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs