A858DE45F56D9BC9 archive

201212062200 14dsxk

explained decrypted filler

seed 578

Metadata

Post ID
14dsxk
Title
201212062200 → 2012-12-06 22:00 on A858's clock
Posted (UTC)
2012-12-06 14:00:18
Timezone
UTC+8 · title 22:00 against posted 14:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,616 hex characters · 808 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201212062200) = e933ddcff2174ea30214c369df2aa36d (name+title)
GUIDs
25
Filler GUID seed
new Random(578).Next(9) ✓ verified
Run
Run 39 (seed 1,106,402,812) (seed)
Draw
69 · predicted N = 25 ✓
Machine boot
2012-11-20 22:02–00:02 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,616 hex characters = 808 bytes = 101 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201212062200 (name+title). Key = MD5(password) = e933ddcff2174ea30214c369df2aa36d, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 25 GUIDs as hex (shown below).

Decrypted: GUID list

  1 43a457bd-3176-6093-853e-813f769c35cf
  2 33e59435-4b4b-3f87-bdb1-3a5400e9a1d0
  3 6d43579f-932f-77fd-a680-6139dec5ad30
  4 fe5a7c36-bae6-8741-aea0-84832266ada6
  5 ac7ef643-57c8-1e18-b0bf-a70458b61e59
  6 ecc9480d-ce6b-62de-bc8a-6ca6e8d68dc4
  7 c5728de8-a3b0-7951-a453-9515975f5b80
  8 ae8a9dca-f256-3fa9-9b16-8cf6179dad7f
  9 e1ad9af1-47a4-4320-b8ba-f02cca99c1db
 10 fc6260a2-6ace-36f7-a033-dd0545aca73f
 11 d1ca483e-8698-1d61-8eec-40abe634872a
 12 d1644ed3-39f2-691b-bb14-e1efe1a48a59
 13 5806c011-e4c7-88f6-95e4-00131575a86f
 14 bf50caaa-804b-1d2e-a39c-0af0e8cc2f2f
 15 1e437398-2abc-5bf8-9dc2-336a2fc104b7
 16 d34a1652-35d1-0cd5-8433-a22b3ec6c257
 17 4d4d0b3f-4dd4-7fe0-97f1-4a2cfef23d06
 18 9a811682-64db-3187-898b-f069055754ef
 19 14c3b5c1-35ee-2bcf-ac67-cb304f691d74
 20 ae0de90f-9be0-1659-9dd4-0a49c6d6e9a3
 21 b50569f0-91f6-5175-8a21-7a687645c36d
 22 18a5cd15-a726-57f7-8c02-95331ab2bbbb
 23 183207a9-9ff5-6c87-baae-a5039bec8dbf
 24 7093abe6-5e2b-8423-ab48-b1b70e79980a
 25 b1cf96da-de7c-3efe-9b94-ff1aedd8d08e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6378167343168150732155683. Exactly this sequence comes out of new Random(578).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 69 of Run 39 (seed 1,106,402,812): new Random(1106402812), Next(8,64) per post. The RNG predicts N = 25; the post has N = 25 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-11-20 22:02–00:02).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs