A858DE45F56D9BC9 archive

201206291040 vsyj3

explained decrypted filler

seed 122

Metadata

Post ID
vsyj3
Title
201206291040 → 2012-06-29 10:40 on A858's clock
Posted (UTC)
2012-06-29 17:38:54
Timezone
UTC−7 · title 10:40 against posted 17:38 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,768 hex characters · 1,384 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
43
Filler GUID seed
new Random(122).Next(9) ✓ verified
Run
Run 9 (seed 449,725,219) (seed)
Draw
33 · predicted N = 43 ✓
Machine boot
F 2012-05-15 19:12–19:12 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,768 hex characters = 1,384 bytes = 173 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 43 GUIDs as hex (shown below).

Decrypted: GUID list

  1 6be160d8-c31e-4b18-a0ea-fdfee4bb0408
  2 0a613958-71a5-530b-887e-cae0f350b5dc
  3 8415695c-5785-0212-9565-ad8fe6a9f3b2
  4 b95ae3d6-38d7-5c7b-be12-566954124edd
  5 f8e1c475-b6dc-2626-98d6-c764d56e1231
  6 1f03ab0d-0e04-18a4-8f80-32222dd562f7
  7 4bae25c4-f866-5189-9f64-2b5fde481c0f
  8 06f2dfe8-eafa-5c51-b722-dc0e6f0b67cd
  9 9e038786-a92f-0f98-a6a1-acec8707f277
 10 6afa4e97-cb6f-20d8-8e03-30edac2c2181
 11 8c8daf8b-e3a4-1702-bce4-b3fbd45a6f2d
 12 90d9ec78-b7a7-6d96-9504-461a434bbff2
 13 1457d874-feeb-48c4-a9c0-88ced9a9ec4f
 14 4a11407d-58e7-892c-bec3-4d300eeac3ed
 15 e5535f4f-cbaa-3c51-b3d3-16693a1fec87
 16 685cda38-60b7-1cc7-9fa9-f9c2d7fe352a
 17 46d2ac36-a8a6-191b-8841-08d21862f528
 18 9572ed2e-2ab8-51f8-bbe7-fc24188d27b7
 19 d8f963a8-37cf-874c-a0d6-e65af6e9024f
 20 e24d6f5d-a56f-48b6-b6d8-cdfe16e4d2b3
 21 6547350f-40dc-03ba-9cec-24d53a7a6f5b
 22 aea84a35-9f7c-796f-afc9-f09f5b895439
 23 2036468b-ecac-5131-beb2-401487fecace
 24 db8999ed-0f30-5bac-9ebb-3eca244e587d
 25 d49cf06c-45a4-588f-acc1-df8bd4ce37ed
 26 866edaf5-c41d-8659-bf6d-4175831a5b83
 27 ae82d1ba-0248-7868-b262-7bd36435a73f
 28 a67140b7-9127-2fe2-a425-fb751d44e692
 29 a71806d2-583c-2b25-abf0-c1606e3e9899
 30 d0b5e3c2-96f4-39ce-a015-cc49d8796502
 31 d33b2cc5-5928-2464-955c-d3708a469669
 32 f3f58201-c609-54a4-9fc4-4d455d7fb474
 33 b5a178cb-bf45-3f5e-84b5-177b17790587
 34 608628a9-9079-0508-8e05-9f1329ee73dc
 35 e92c52d5-702f-265d-afc7-5c8dbe6e38c2
 36 106ee87c-d57a-06ca-a083-a43896a78332
 37 c5093f0d-71b2-0cb8-9193-7edb8bcc9db5
 38 5b77510b-99be-44be-97bb-f193199be4c2
 39 8f8756e4-40c7-24bc-aa90-ef1961d44fdf
 40 95091944-c1f2-2d69-a5ab-d685bad6c207
 41 178a2e3c-5707-1032-a53b-175f8203fc56
 42 9952e345-0d8c-5fb0-8835-43268b491a80
 43 e09e1050-79eb-81b2-8f50-354012a27ff3

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4505215502164831158407555872232530200422158. Exactly this sequence comes out of new Random(122).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 33 of Run 9 (seed 449,725,219): new Random(449725219), Next(8,64) per post. The RNG predicts N = 43; the post has N = 43 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 19:12–19:12).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs