A858DE45F56D9BC9 archive

201212081900 14issn

explained decrypted filler

seed 711

Metadata

Post ID
14issn
Title
201212081900 → 2012-12-08 19:00 on A858's clock
Posted (UTC)
2012-12-09 00:00:02
Timezone
UTC−5 · title 19:00 against posted 00:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201212081900) = 576413317efc1928ca2dcdee2fd29c16 (name+title)
GUIDs
36
Filler GUID seed
new Random(711).Next(9) ✓ verified
Run
Run 39 (seed 1,106,402,812) (seed)
Draw
90 · predicted N = 36 ✓
Machine boot
2012-11-20 22:02–00:02 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201212081900 (name+title). Key = MD5(password) = 576413317efc1928ca2dcdee2fd29c16, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b52d9c58-be04-168a-85f4-d89655289642
  2 91f04c7a-2907-32a7-8f3a-16d2baef1c0c
  3 8c2841f6-ac47-6eae-b852-f4608f184505
  4 757884df-b055-2167-8ae5-fe92329b2aa3
  5 4c71e957-6a1c-178e-8d32-dba82fd9e017
  6 7a8e8861-881a-85f3-8700-7897a0935f59
  7 d2f76701-1759-4362-87f7-1f481fb96cf9
  8 2b774c9b-e4ec-1d3d-bba0-fa364c9e5492
  9 aa0c1134-2d09-8e69-b59f-3ea76e19b485
 10 9e2f632d-ac2f-400f-900a-9ffaef5d1857
 11 d04fbc1c-bc50-09c8-94fb-2fdc8395c5f2
 12 623a6b63-3703-4d08-9aa2-82e281385ea7
 13 65a1e895-a8df-396d-9f48-4208cdb82faf
 14 5cb565a5-31da-3713-aaa6-42fcbdbbffe9
 15 a93a407e-9e52-554f-8355-579ff655e6dd
 16 45323735-a091-0be1-90de-9e1b1ae33b7c
 17 152d5162-7c38-64d9-a83e-1f2517411955
 18 25024fbc-c1eb-76fe-bc20-c9f0f010ad5c
 19 27969aba-8544-85c5-816d-8926d1128719
 20 f50ea47c-ebda-5d3e-b418-18d3397293a1
 21 92cf9d11-a55a-2d76-8dbc-5e2ea3137ea8
 22 c916901d-fb06-2b7e-af3a-7f1c968eb26f
 23 880fed1f-29d2-1722-8b86-ecf62037b19e
 24 e8e26d03-3e5b-3f6e-b520-70a012a7dc76
 25 25262742-ff85-3992-80d9-245471d51b4a
 26 3c78a833-1944-7bc3-ba23-089f3370523b
 27 10fc1ddc-3563-2961-bb1e-f7184df2e8be
 28 cc0fea9e-74a2-2281-bcf8-84230258a080
 29 69230072-c97e-86de-8bf7-c8838b0bc99d
 30 db9b5277-9f93-6512-9bb2-9a86b2ea8b34
 31 78d5347d-7a6e-6051-886a-2017b635f0b2
 32 590dc0e1-ecb2-64e7-9cde-8617120c83b0
 33 8268a18a-5e6d-1b86-b47c-74cb362ffbb6
 34 8684c60f-d997-7be5-9835-f1660de24a13
 35 d8adf9d0-f287-86a8-a15c-b79c0298c65b
 36 8e558e0d-8cf6-53c6-b1ba-8d123e4ea6ef

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 136218418404335067852213372286661785. Exactly this sequence comes out of new Random(711).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 90 of Run 39 (seed 1,106,402,812): new Random(1106402812), Next(8,64) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-11-20 22:02–00:02).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs