A858DE45F56D9BC9 archive

201207030735 vz2xw

explained decrypted filler

seed 859

Metadata

Post ID
vz2xw
Title
201207030735 → 2012-07-03 07:35 on A858's clock
Posted (UTC)
2012-07-03 11:33:47
Timezone
UTC−4 · title 07:35 against posted 11:33 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,512 hex characters · 1,256 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
39
Filler GUID seed
new Random(859).Next(9) ✓ verified
Run
Run 10 (seed 38,548,093) (seed)
Draw
14 · predicted N = 39 ✓
Machine boot
2012-07-02 09:51–10:51 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,512 hex characters = 1,256 bytes = 157 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 39 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d46479c5-ff43-4a43-a209-7346e2eb45ad
  2 9abfc298-b1a9-73e2-882d-9ff2c78020b0
  3 13d7dbbe-90ba-184b-8384-25bea656dba3
  4 8e4b6765-ce95-8be6-80b3-f413c5dd5047
  5 4969eb78-5225-0484-ae58-27b5e51b53e5
  6 690c6c50-5d57-2d33-9396-b4ad0e45f8d2
  7 4daa3731-77b7-74ce-95e9-3612188a8ade
  8 d2f1603d-5344-3489-892d-aa08c243899a
  9 5e1a99c8-bb8d-2aa9-93de-7c4630827cf8
 10 9893def4-2440-0121-97d0-59d3d407e54e
 11 2b39aae3-f7e1-1b23-8426-2934e3166f40
 12 2bc9552f-def9-0ea8-8abd-88a3a9a38d79
 13 f0f1ab04-dc9f-1e5e-b4a9-33a2697d2909
 14 a0c3ed5b-ead9-35d4-ad54-3728770ba95d
 15 91b966d4-e7d8-261d-8fb7-6de56d94672c
 16 8882af33-f8a4-4d25-909c-50c6100b59a6
 17 6ef5c65f-0c23-8f08-8ec9-caca708d6d3f
 18 f66ae2eb-b118-5d09-b948-923c1abf0be1
 19 393fd826-9f42-8237-bad7-d312ed0f356a
 20 54169cfd-5421-82b8-847c-ee412acdf2f3
 21 bd2af358-0f0a-8005-891c-05b28ea3bc43
 22 bb92629b-daf0-5664-ba88-dbfc9d0caafc
 23 9f026e88-8329-1d69-8fd6-8278d0d02fe2
 24 1e018658-ef3c-188e-a0cd-f9c1645dbfa9
 25 885cf143-680b-7b6c-b202-465c282be408
 26 ef31cd9b-7df6-02f1-a541-6c0a2c4288e6
 27 78255dfc-4720-4c03-abd7-954a800c9ef7
 28 ac45a49c-dba2-8b0a-bbd9-cff1d35e4a17
 29 45c7a30a-6c8e-7666-9222-d9adad599101
 30 b93caa2a-c17f-7567-998c-ffea96888752
 31 5af0f148-b421-23fc-96d4-383883468646
 32 50c8f3f4-8c2e-6b74-8dfa-6e0e74546df1
 33 bfdb851c-ac4a-6cab-bd44-8a87ba46db13
 34 0a3779e7-648e-4e89-94e5-fdd8f7bfd597
 35 f23b9822-cb31-54dc-9892-aa8e99fa6ded
 36 2437dc59-89a3-8062-8fef-fe431440cea8
 37 68a1755d-6d0b-562d-8c6c-1b368dfdc8e8
 38 7c11a816-f2cf-7874-bbc1-b61787097dcf
 39 dd23e703-76aa-449a-955d-69001c05c122

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 471802732010132485888511704877266458574. Exactly this sequence comes out of new Random(859).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 14 of Run 10 (seed 38,548,093): new Random(38548093), Next(8,64) per post. The RNG predicts N = 39; the post has N = 39 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-02 09:51–10:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs