A858DE45F56D9BC9 archive

201212060000 14brwl

explained decrypted filler

seed 457

Metadata

Post ID
14brwl
Title
201212060000 → 2012-12-06 00:00 on A858's clock
Posted (UTC)
2012-12-05 16:00:05
Timezone
UTC+8 · title 00:00 against posted 16:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,192 hex characters · 1,096 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201212060000) = 33a13039e1137018096b6ed7e08a9fe8 (name+title)
GUIDs
34
Filler GUID seed
new Random(457).Next(9) ✓ verified
Run
Run 39 (seed 1,106,402,812) (seed)
Draw
58 · predicted N = 34 ✓
Machine boot
2012-11-20 22:02–00:02 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,192 hex characters = 1,096 bytes = 137 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201212060000 (name+title). Key = MD5(password) = 33a13039e1137018096b6ed7e08a9fe8, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 34 GUIDs as hex (shown below).

Decrypted: GUID list

  1 14845117-7575-4dc9-846a-d397c91319e6
  2 b67c23eb-41ed-81c7-92bc-7681450059ad
  3 900b9e55-c26f-1893-afd5-5fb70e7cf35f
  4 062d9d04-667c-0dc4-8216-34f0088fd6eb
  5 95855dc4-78fa-46ab-a697-d4ddee0bc2b2
  6 b97ed4e2-55ee-884d-acdb-4388cdad6e9d
  7 e42333fb-5043-63a8-ad73-03ac4c9aafe0
  8 14e74814-651f-6c32-a3c7-590a2362d77b
  9 9781ae30-4c61-40d7-83be-42377106e7f5
 10 f8f01c03-909a-75cb-8ae1-9b992d6b3e55
 11 897469f7-012a-87a2-871c-c85100652965
 12 83a32238-1809-24b3-86ef-efc2bcb29c91
 13 6d7d85ff-cb97-7c44-8242-628f250b14cc
 14 e2205fb2-f3a3-2823-aee4-ff4b5c9e4247
 15 4ef6a34d-d9f2-7dc4-ba54-4b1ec1a9e0b5
 16 aed721c7-d376-3569-a6b1-49d9213078ea
 17 96436b64-64c6-83d2-8166-26fdce134b96
 18 3198dee6-bd46-3f27-b6a4-b0ff3610a1f3
 19 ab321a9b-0e3e-0e78-9f14-3bf70e0bf63b
 20 ef3eb30f-1eda-2e56-a2ba-b6369cf510d2
 21 a5b6b59f-6879-4040-aacd-734f0c15318d
 22 050425ec-b201-8dcf-a617-80a528f7f921
 23 ab289066-6594-2ae7-bcc3-a4ad9da246ac
 24 84571872-72bb-620d-9be8-b83ab87fe347
 25 4c93ff9f-2767-409c-a456-f7749f39c61c
 26 434cf239-1bcc-465c-b660-a164ed145424
 27 6242fc72-73ba-741b-8f01-aba62a0aea29
 28 647caf98-ad6f-73e2-935b-65d7d712b67e
 29 4ffe0d00-d6fa-6439-9328-8ed5ba2a169c
 30 2d5ae5ff-fbac-1c1f-937d-bd105e7bc72b
 31 cee1d162-742c-8937-bdbc-9a9b809c7c5a
 32 de85d260-d6e7-757b-a06b-13d371b9aae8
 33 9917c9a9-8af1-09fb-a530-88a017c0744e
 34 aa5aab5a-52aa-4760-8dbc-bb4d9676080c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4810486647827273830248264477618704. Exactly this sequence comes out of new Random(457).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 58 of Run 39 (seed 1,106,402,812): new Random(1106402812), Next(8,64) per post. The RNG predicts N = 34; the post has N = 34 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-11-20 22:02–00:02).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs