A858DE45F56D9BC9 archive

201206291040 vsyj9

explained decrypted filler

seed 712

Metadata

Post ID
vsyj9
Title
201206291040 → 2012-06-29 10:40 on A858's clock
Posted (UTC)
2012-06-29 17:38:57
Timezone
UTC−7 · title 10:40 against posted 17:38 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,640 hex characters · 1,320 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
41
Filler GUID seed
new Random(712).Next(9) ✓ verified
Run
Run 9 (seed 449,725,219) (seed)
Draw
34 · predicted N = 41 ✓
Machine boot
F 2012-05-15 19:12–19:12 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,640 hex characters = 1,320 bytes = 165 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 41 GUIDs as hex (shown below).

Decrypted: GUID list

  1 8705bd3b-82f5-63c8-9361-8748b4dd33a0
  2 8cbb53b4-b19c-63b9-9a5b-d42ded6c47a0
  3 987c7f92-2891-4437-b338-9261938d3e21
  4 4f8f95b7-151e-4cd0-9b5f-1bd2919372d4
  5 aecbf363-f922-5790-b951-df00a6817103
  6 b25b07e1-e6bd-6561-ba75-53708e7491c7
  7 a21bc7f4-27ca-81ac-83dc-583f035d6f68
  8 3167e0f8-8b39-566a-83f3-93d223d91c41
  9 f521851c-dafa-0687-9a7c-25304db9a6db
 10 2b589a8f-4ab7-70d0-8810-67da2ce65318
 11 94933c7d-ea77-7a12-b34f-03371c7e526a
 12 37d28a4d-359f-3e4b-b2fa-e894b9d202a9
 13 b253e2b5-2169-0bd3-b13b-881a68de2465
 14 4fb50a71-58d5-81a0-86a2-60e317329560
 15 bbfbff6b-b024-3894-9860-898037c4328d
 16 e868afda-4389-6c71-a702-6319e43da9f6
 17 9cbd3457-7173-1a06-b775-819ee3438a08
 18 21f1d76a-de6b-3483-8b05-8084f76c79ab
 19 264e5d55-707a-8923-9554-4e4433109a4f
 20 461e5540-f985-09d5-a9be-ce54336a5f0d
 21 d1091c52-1854-3e57-a018-1ec1472aac75
 22 32ea6354-796b-4c82-97fa-0021abe9d496
 23 298138f5-d9db-2fb5-a8a7-f39769aece87
 24 12e7b59e-37e8-6695-95e7-486da209b0a0
 25 55106f2c-5d95-4a60-8fdf-f2438391981a
 26 885406c1-264b-4cb5-a78d-1c4b718b9696
 27 74aacf71-fdd5-0266-925a-904a3dadcdf4
 28 ae3523ae-3492-759d-bae9-2f3fd7dbaef9
 29 69e389ec-d3d8-1739-a85a-d1fd70e2871e
 30 a899a3d6-c1b4-416d-8a63-b9959a913dce
 31 f63bea14-7238-01ec-80d1-4fb99b28289d
 32 4fc75dfc-9d74-8a6a-89ee-6fc0663c787e
 33 cb69be63-ca54-5b19-8aaa-993b9ecbd3b1
 34 196f9338-eae2-7818-8072-659caeb1b050
 35 f2d44557-9c3b-2cde-b323-f6a1500ad429
 36 8cc88efb-8ecf-50af-b008-1083e8cb717a
 37 1b89c5de-06e1-70ba-a41d-184f95e425df
 38 64aea0e4-8f5f-5211-be42-380713f540c8
 39 a353d233-bc74-2b31-8797-e5c01e6521f2
 40 f3d3c4e3-06f6-20a3-8581-3d7023d3170e
 41 176baec3-9534-0909-ab6b-7d132ee8ef8e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 66445685077308361380342644071408572575220. Exactly this sequence comes out of new Random(712).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 34 of Run 9 (seed 449,725,219): new Random(449725219), Next(8,64) per post. The RNG predicts N = 41; the post has N = 41 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 19:12–19:12).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs