A858DE45F56D9BC9 archive

201212041614 14a5t8

explained decrypted filler

seed 365

Metadata

Post ID
14a5t8
Title
201212041614 → 2012-12-04 16:14 on A858's clock
Posted (UTC)
2012-12-04 21:14:31
Timezone
UTC−5 · title 16:14 against posted 21:14 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,512 hex characters · 1,256 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201212041614) = 3823bc1892ee22ac2afc5e9f1053339f (name+title)
GUIDs
39
Filler GUID seed
new Random(365).Next(9) ✓ verified
Run
Run 39 (seed 1,106,402,812) (seed)
Draw
47 · predicted N = 39 ✓
Machine boot
2012-11-20 22:02–00:02 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,512 hex characters = 1,256 bytes = 157 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201212041614 (name+title). Key = MD5(password) = 3823bc1892ee22ac2afc5e9f1053339f, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 39 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9444a176-c89c-3458-b7b6-f8af5d45e336
  2 6c5d5dc6-18ea-8ad9-8aa6-249f6559b6bf
  3 ea95e966-52f9-846e-b008-df3ac35afea7
  4 2bcf8c90-a0cb-4403-aa03-581d0343887b
  5 67943c3a-988d-867b-ab6f-d9a1ab8b62de
  6 b5d82978-483c-438c-b35c-db3e8851a637
  7 c23552a6-5edc-4943-ae81-b197ad5ebb2b
  8 a84d2142-ddb7-52f2-acd3-62c18aac8996
  9 59ed1384-ed89-17d5-ad48-af4bc7a8f215
 10 716f8798-8ba9-7e21-8a07-d12a7917539c
 11 3339dbae-14fb-1b65-bc01-c4dd225c8b11
 12 88af45fa-7295-35ba-91ae-df9ecd1fa804
 13 8cd09a78-c987-4270-acc9-7bb06fdb0b55
 14 fdfb9cf2-3709-3b13-b3fd-d87afe5b86dc
 15 00963770-7cdb-4e3a-9e52-0fe2353f4bc8
 16 9e94d431-f243-8893-bce5-a8ba227dc264
 17 50332af7-b258-2f0a-a3e8-3f15d9114cfd
 18 b2271530-95a1-24a3-aba6-58e51e4702f6
 19 c39db40b-b2ea-5b53-a0cb-bcec716a7cdc
 20 02c905a0-f04d-5e46-b13e-e97f4943f9fc
 21 bb9730cd-c3d3-20a8-9735-5c47a410da43
 22 1c92817a-8b3e-3ad0-860f-96cade4c5655
 23 0f93793a-8e71-6e9f-9be9-7c8ab4abff0c
 24 e8d3dc37-56e0-450e-83fa-c4e42a0b888e
 25 6f359339-0667-44f4-9347-7c45745b4745
 26 2875b51e-848e-21eb-8d5f-685ecf464b85
 27 6b71051b-4915-615c-b56c-c2677a2704e4
 28 3c0166f3-9eea-7393-bb2c-8107c75185df
 29 d1286ee7-7eb7-36b0-84fc-45b6ed3dc44d
 30 4ff5a8b7-acfe-0dd2-b041-ca3aeb05b7d4
 31 46dcf11e-677d-8d8e-8881-2985a1c1bd3b
 32 d5dc86d7-496a-548e-af23-37341101f04e
 33 1ba1ad82-49dc-0fe9-a861-ecf9e8b3708d
 34 f0abe788-5694-1ee1-8c56-8dc8c28f98f0
 35 9e54d8d2-eba6-0271-add1-261961d96b91
 36 f24d67bd-9bc2-52da-b7b7-673a5bbb2602
 37 744dc7fe-bb18-3d84-bf5a-f4e6aed23a1b
 38 d64673ae-d67c-1d2d-b37b-b1bd4032f0ef
 39 0d9cc0bb-f539-7a83-b7fa-ea5a46fda003

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 388484451713434822552364426730850105317. Exactly this sequence comes out of new Random(365).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 47 of Run 39 (seed 1,106,402,812): new Random(1106402812), Next(8,64) per post. The RNG predicts N = 39; the post has N = 39 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-11-20 22:02–00:02).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs