A858DE45F56D9BC9 archive

201206291040 vsyjq

explained decrypted filler

seed 995

Metadata

Post ID
vsyjq
Title
201206291040 → 2012-06-29 10:40 on A858's clock
Posted (UTC)
2012-06-29 17:39:08
Timezone
UTC−7 · title 10:40 against posted 17:39 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,384 hex characters · 1,192 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
37
Filler GUID seed
new Random(995).Next(9) ✓ verified
Run
Run 9 (seed 449,725,219) (seed)
Draw
37 · predicted N = 37 ✓
Machine boot
F 2012-05-15 19:12–19:12 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,384 hex characters = 1,192 bytes = 149 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 37 GUIDs as hex (shown below).

Decrypted: GUID list

  1 7d013f18-2a99-46d6-be27-7f908f7f3b48
  2 571142ec-0858-6bde-820b-4452f3325c1d
  3 4bc8f810-cf19-2eda-a37c-8a6b16cf7446
  4 bb00a140-083a-8e72-9eb8-addfab2eaebf
  5 3178ef79-dd33-3c06-99dd-f1b198399e8d
  6 f72865ae-a6b4-0292-8d18-c9a1cf57ea08
  7 eb032708-694b-6bd0-bf5e-dc7880deb72a
  8 894bf97b-93d0-55d9-9772-803aa0ed84dd
  9 58e134b3-b8bb-09d8-910e-f01dd850955c
 10 8482c8dc-2880-1b7f-9303-7fc0d97726ca
 11 96530940-18c0-300d-9269-5033df976ae4
 12 25fdd20a-f3ee-2bbe-9d29-eedb0f0a0321
 13 18e7b8b0-9665-5c5f-9d11-d1330c084565
 14 8aa4bd07-84bc-1149-8ee2-cd97a4d30b77
 15 29520ee9-a58d-4f6f-abca-0dccc07e35b2
 16 4de69acb-c7bf-3c90-8604-99f0e3918945
 17 2adbfc81-8846-1523-aaf7-56399ad60258
 18 f8f291d9-92a5-83ae-afe0-76fdcc4fc443
 19 c7b591c3-40ae-5023-913b-092dc9b42675
 20 549f63a4-7688-5ecf-9930-a43a54212852
 21 0660bf73-df4a-017f-81ef-407db4b68c7e
 22 2573ac42-000a-859a-8549-f42f7f1eafcb
 23 fbd43d89-ff0b-1f0c-a526-450e1bd4e157
 24 0cabe4e7-d41f-5a71-98e8-6a8094a61899
 25 4e6b1f56-01d0-1940-b6ce-a33f79207df8
 26 a5c5ff01-615b-4728-9398-a114d381a631
 27 cc42101a-be2e-35f4-aec4-62c71577d4ca
 28 cc72a421-fc37-1817-9367-c902a14c30e3
 29 7e0c1d16-5b5c-39eb-ad68-edb53a9234fb
 30 1bf549ed-245b-3903-8fb7-e174a32639d9
 31 d0bcee9e-e270-4c05-a9ed-e5495ee4e5e2
 32 4ad62609-5152-4b07-ae65-e154cf2758b1
 33 04208bad-2551-3df6-acaf-5d6270e49127
 34 42cb29ea-02b8-8dfe-8ef1-238d8101bcce
 35 4ef2eb78-c342-080c-89b0-ae6ec95231c8
 36 47baf69c-cb59-7e41-bfd9-81e432594445
 37 b86055c9-47cf-274a-bdeb-44468b39d2d4

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4628306501325143185508151431334438072. Exactly this sequence comes out of new Random(995).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 37 of Run 9 (seed 449,725,219): new Random(449725219), Next(8,64) per post. The RNG predicts N = 37; the post has N = 37 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 19:12–19:12).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs