A858DE45F56D9BC9 archive

201212051000 14aq0t

explained decrypted filler

seed 794

Metadata

Post ID
14aq0t
Title
201212051000 → 2012-12-05 10:00 on A858's clock
Posted (UTC)
2012-12-05 02:00:02
Timezone
UTC+8 · title 10:00 against posted 02:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,512 hex characters · 1,256 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201212051000) = cdc78bd4d08894df951d4fe3da525fe6 (name+title)
GUIDs
39
Filler GUID seed
new Random(794).Next(9) ✓ verified
Run
Run 39 (seed 1,106,402,812) (seed)
Draw
51 · predicted N = 39 ✓
Machine boot
2012-11-20 22:02–00:02 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,512 hex characters = 1,256 bytes = 157 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201212051000 (name+title). Key = MD5(password) = cdc78bd4d08894df951d4fe3da525fe6, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 39 GUIDs as hex (shown below).

Decrypted: GUID list

  1 79e43d87-73a4-4299-a7c5-d633ac0bcefe
  2 e455624d-0d1b-76ad-b083-3f5f382b67e3
  3 7edbb753-7bdf-6d04-83f1-4513228f1cab
  4 2e244549-6589-0996-bf7c-47f0d6bb449a
  5 aefae29e-b91a-6e3f-ab6e-4adee966658d
  6 ea59436f-8d2c-3111-8f79-064d28c00782
  7 419b40ee-84b4-5bea-8f1b-fec6e2f03f45
  8 e29af501-beb8-75bf-b4b0-1cdd5781aa8b
  9 332dfa72-bac0-1a0e-a7cc-5584a23e0ac0
 10 11ef83ba-b21a-0ab0-9c2b-4e568aac969d
 11 02dda14e-ae8a-222e-b302-fdf68a980c4b
 12 ed65446b-0f7f-3a0a-87c0-8a1796d7e3c9
 13 da8da88f-4850-42fb-ad6b-079ca539f722
 14 20c2e524-1e6b-411f-b8a4-4aab07146a32
 15 a8893266-84c3-6f6d-b6e0-4f2eaaf037fb
 16 a0fe8eac-f922-89ca-8926-de0746645501
 17 bddc4f63-02bf-576b-a3cb-a8a40f1fc4c5
 18 f8e5eb82-c7f6-2055-823c-35224bd13ca2
 19 bd0f05fc-f767-1727-ba09-dfb7bfba4af0
 20 b062bdca-571d-6ba0-8f99-b2b414f8fbe9
 21 0e940f1c-3fe3-2c5e-a187-1584f1b58ec2
 22 c3e7167a-a534-54d7-87e2-52b839b584d5
 23 b4fff4dc-c514-1d8b-bc86-91189f82afc6
 24 4aa0e44a-5dbb-3aec-8ca3-7ce77b7b4cda
 25 707aee90-1914-48ff-97ee-2a7493d6bd20
 26 5c35d510-042a-186e-b66f-574101e0159f
 27 7220f117-3adb-5477-b9cd-9f5aeeb85ff4
 28 ec0ad749-21d9-5275-b94a-c37c5b8e1a9f
 29 801f91d2-7222-745c-92fd-9c1e1daabfc7
 30 4f6fa1fd-7e09-4d2d-b89f-d33e1d680592
 31 df7cb492-49e1-2ef3-9fc7-97d87289cac9
 32 91dd31a9-9af8-5e0f-8349-39d4372a2ce5
 33 9a42059a-246a-5b99-b23f-e21091bcc9f4
 34 189f767c-9485-8577-9c5a-53818672b26a
 35 6aef9ca2-6526-85dc-9c99-0d354050502f
 36 3d8d2cf8-9f6e-15a5-b473-671955960496
 37 d6e39f5f-3471-665e-9862-88304e19b69f
 38 79aa4a16-9758-42fe-bf05-77a6fd798932
 39 2a3a8819-3ea8-2473-a2fb-dae402b09b66

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 476063571023446852162513415574255881642. Exactly this sequence comes out of new Random(794).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 51 of Run 39 (seed 1,106,402,812): new Random(1106402812), Next(8,64) per post. The RNG predicts N = 39; the post has N = 39 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-11-20 22:02–00:02).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs