A858DE45F56D9BC9 archive

201212041541 14a3hb

explained decrypted filler

seed 762

Metadata

Post ID
14a3hb
Title
201212041541 → 2012-12-04 15:41 on A858's clock
Posted (UTC)
2012-12-04 20:41:30
Timezone
UTC−5 · title 15:41 against posted 20:41 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,000 hex characters · 1,000 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201212041541) = 3c06830be3ffeb1b42a1820fad1fe3b6 (name+title)
GUIDs
31
Filler GUID seed
new Random(762).Next(9) ✓ verified
Run
Run 39 (seed 1,106,402,812) (seed)
Draw
46 · predicted N = 31 ✓
Machine boot
2012-11-20 22:02–00:02 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,000 hex characters = 1,000 bytes = 125 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201212041541 (name+title). Key = MD5(password) = 3c06830be3ffeb1b42a1820fad1fe3b6, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 31 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a1109c8f-de3d-71c2-9abb-b7325ff0189f
  2 d303e816-da9d-378c-8419-d931a41d6f42
  3 8b7f7428-fdee-3c16-bad6-00be945a662a
  4 c8ec0e9f-eca2-1c33-8b31-97306a170c59
  5 8b891b99-3492-26ab-9179-9df1eddcba5b
  6 535466eb-6686-4f35-b93e-fec644e08968
  7 eccbc99b-4ea1-2fde-865c-de3704f45161
  8 e078ff1a-720c-6b19-8b83-a4ffd7be0a66
  9 56f790ba-661a-259e-9fdf-a475ca228168
 10 5629f11e-94a1-2b48-b962-f95f77807580
 11 496b383d-5569-6e0c-b40e-74b9b1055fc9
 12 fb2aa136-e155-3426-bc6a-cc5f29e9699e
 13 c7c67ca8-3b9e-42ad-a7dc-96c9fd0f28b0
 14 0b5d4336-b426-82d9-9316-59bd2a59021e
 15 e8e6ce80-c767-3916-83f0-029f889de3cb
 16 1c3ce343-865e-864b-916a-5f168c03013d
 17 301fbf49-b906-1826-9f73-b548ece240ac
 18 d1c1e416-b766-34ab-97bf-86c14b2b50f9
 19 3684ca78-453a-258a-a4b3-6fe614eb0a76
 20 ad66ca66-ce66-3f0a-b572-d83731aede07
 21 fa5f3699-ccdc-00f6-bfef-1d8648d43971
 22 22660cac-e731-7f4a-913c-df7e09bc4ae3
 23 e9d0e4b8-4195-61cc-b525-9382a1efbc03
 24 0574fddd-711d-298d-b0f3-db8d0c2f09db
 25 28afcdee-b18e-3d75-bdb0-502853387fad
 26 3e8615bd-e230-5e1e-b9e3-67a6f765099b
 27 06ff96ad-64ec-056f-addf-f5dc46f97e3d
 28 51b189bb-e98d-77cd-88c0-b30ed41896b8
 29 0a10d822-143a-0cb3-a9e6-d5d478770e21
 30 9be96c19-ce7e-615d-9e8c-cbfc09d97473
 31 489a4f5a-ab01-4eef-bb0e-1262046b4b63

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7331242622634838132307623507064. Exactly this sequence comes out of new Random(762).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 46 of Run 39 (seed 1,106,402,812): new Random(1106402812), Next(8,64) per post. The RNG predicts N = 31; the post has N = 31 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-11-20 22:02–00:02).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs