A858DE45F56D9BC9 archive

201212111300 14ob63

explained decrypted filler

seed 467

Metadata

Post ID
14ob63
Title
201212111300 → 2012-12-11 13:00 on A858's clock
Posted (UTC)
2012-12-11 18:00:07
Timezone
UTC−5 · title 13:00 against posted 18:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201212111300) = a8fe3ab0982b00415a708aae0236a264 (name+title)
GUIDs
36
Filler GUID seed
new Random(467).Next(9) ✓ verified
Run
Run 39 (seed 1,106,402,812) (seed)
Draw
101 · predicted N = 36 ✓
Machine boot
2012-11-20 22:02–00:02 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
10 · 6
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201212111300 (name+title). Key = MD5(password) = a8fe3ab0982b00415a708aae0236a264, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d775104a-299e-6cf4-811f-1e541f5d1329
  2 ec9d1bf1-ce96-7cb9-bb10-365350dda7a4
  3 fa4f5dde-1e19-19ac-a736-e14c43805ead
  4 359d5dbf-9f15-29ea-b6e6-b3ac9730dbfc
  5 b14408a7-4296-064f-8f0f-5c13187f033f
  6 78844233-b6d6-65ed-802d-bad6cf4239c0
  7 8355a85a-0aad-1a84-b748-43354695e30b
  8 b75b3be8-9983-6b49-93db-27991aad491c
  9 74620117-47e5-6f0d-bfa6-8fd925dc5d66
 10 e307d265-4529-4740-bdc5-7161c452e04c
 11 b0f519fb-052b-3d2f-9915-a132aa04489f
 12 c720c104-5abe-0ca1-b0aa-ee0448d7a873
 13 68ca589f-bbbd-669c-9b26-19c4878fd9e8
 14 27a8d4f0-4eca-3f2f-a021-cf9f0329bd8c
 15 c7ec5cb9-5b30-7a1f-9962-c9e95afb617e
 16 75a6b080-2860-686b-aa05-7bf6d443c330
 17 39c67b64-811b-1baa-beab-36ed556e3613
 18 9610a417-652d-4e10-9ee0-f38046f24f27
 19 f64e10b4-986f-26bf-b2b8-a738e89b4c9e
 20 74b62500-a4bc-130c-8450-d979f1a1365d
 21 293d2d6d-2e6a-757c-820d-5091afe2415f
 22 9e0452de-ad5d-3271-b57c-10377269d763
 23 fd8c7000-618e-8f7f-848f-e88687b2cde3
 24 1bf22446-0a3b-1e7b-ad1c-5946d0fdc080
 25 22037a37-9e7f-4cb8-b5f1-3e425dd53c33
 26 26fddce1-a825-80f4-b8f9-6382766792f1
 27 c323904a-ba09-3b6b-ba33-71ae13ca3c42
 28 d7fb5413-8163-0c11-80a7-17a346ce6b31
 29 069a6c9d-db58-493d-bfea-b593a7b0bf10
 30 ca748988-166a-1285-b2b2-e33d231b7660
 31 0a07c2ca-d848-5de1-97f4-e48dcef5239e
 32 6d32f8cf-82e7-4feb-8fdc-9e1d2f8f8003
 33 6fbb3524-90a3-052d-af55-4aac02883556
 34 510f88f8-68e5-614f-bee9-6271823f60c0
 35 b478ca0c-059d-64f9-a97c-b2a828f5e154
 36 f4c8ab57-a57b-0b71-b73e-f7c8834dc9d5

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 671206166430637614217381483041540660. Exactly this sequence comes out of new Random(467).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 101 of Run 39 (seed 1,106,402,812): new Random(1106402812), Next(8,64) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-11-20 22:02–00:02).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs