A858DE45F56D9BC9 archive

201212120100 14pnva

explained decrypted filler

seed 80

Metadata

Post ID
14pnva
Title
201212120100 → 2012-12-12 01:00 on A858's clock
Posted (UTC)
2012-12-12 06:00:08
Timezone
UTC−5 · title 01:00 against posted 06:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201212120100) = 06196abfb6bda52e9f4bb1bfc8555acc (name+title)
GUIDs
33
Filler GUID seed
new Random(80).Next(9) ✓ verified
Run
Run 39 (seed 1,106,402,812) (seed)
Draw
103 · predicted N = 33 ✓
Machine boot
2012-11-20 22:02–00:02 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
7 · 1
Tags
automated (decryptable)2012Encrypted masked GUID listeditedkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
Other archived version (the post was edited)
0
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201212120100 (name+title). Key = MD5(password) = 06196abfb6bda52e9f4bb1bfc8555acc, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 1a1fe926-15de-44a4-80e6-172b1b066051
  2 586ca2bf-ca59-2363-8be0-2c15a67937e5
  3 988d28a5-7a41-6536-b8fc-5c0b05ad4008
  4 e63b52a0-415f-5a18-bce3-977d99a623b9
  5 c16c2ab3-72bc-2299-985c-24387a088975
  6 af96143a-f54a-40cf-a9a8-eb044449ef55
  7 ec1f48c5-f430-6ae7-9556-d03ef4e35baf
  8 dfa0a370-e4fa-528b-ad06-fdb137585355
  9 42c08e81-06ef-7622-a0b8-29cdbc5333b8
 10 48580272-4d50-6b6d-9bf0-fd4c141da248
 11 5c335b6c-6e63-2fa3-a6eb-b30deccd1aec
 12 12cd8cbb-b675-8074-82d4-6ea2a08f8522
 13 8b891a6e-1f61-5143-80a4-4d28b2f3d6ca
 14 2f8c981a-941a-0e53-bf18-796f0ad247e9
 15 944924f1-8aa8-8c14-87f3-8d71a6a72a3e
 16 4d202b22-e746-872e-85a4-d5130ae940f5
 17 972f13dc-c62c-4b96-bcb4-d08a903cd0c7
 18 9924f312-f87d-552c-97ea-29e63c050ec4
 19 b790bfae-c7b5-7fda-b4e6-25a1884f8265
 20 3858d501-58f5-25b7-bff4-81506eb555ea
 21 95983130-480b-4ad0-8a3f-3c50a8c29659
 22 aa60f1aa-018d-4bd7-abe0-f3c7b0c5c39e
 23 8e72e52b-c44a-47ac-96b8-04ff549f0238
 24 eab9c8c1-6a2e-8273-ba36-c80deacbc5b0
 25 9c746320-64e4-4f11-b011-4ab9ab048781
 26 fb3a6be2-2cf8-8ea4-884d-6d7550cacff8
 27 0129bfcb-d8f5-63e3-9598-0d156af4e8de
 28 8371bfdb-a0d1-267c-bd87-69b36438f9db
 29 bb8aec5c-4fae-54cc-8aea-ac2696ae7ecf
 30 5b75fd0d-72cf-4574-b6ef-bc53bbcc0499
 31 a5ed4df4-8c82-6163-b3da-ad517e5b6efd
 32 e5e4ff34-7fe0-4523-b76e-a18ec14079fb
 33 065990d5-787e-4d58-9932-441c76a7a109

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 426524657628508845724448486254644. Exactly this sequence comes out of new Random(80).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 103 of Run 39 (seed 1,106,402,812): new Random(1106402812), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-11-20 22:02–00:02).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs