A858DE45F56D9BC9 archive

201207031135 vzd9n

explained decrypted filler

seed 765

Metadata

Post ID
vzd9n
Title
201207031135 → 2012-07-03 11:35 on A858's clock
Posted (UTC)
2012-07-03 15:33:50
Timezone
UTC−4 · title 11:35 against posted 15:33 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
33
Filler GUID seed
new Random(765).Next(9) ✓ verified
Run
Run 10 (seed 38,548,093) (seed)
Draw
18 · predicted N = 33 ✓
Machine boot
2012-07-02 09:51–10:51 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a066037e-abeb-3c6e-b8fa-4fe691524548
  2 fcda1ee1-d4bf-21e7-9ea4-c908662a3645
  3 e9ff56e0-3593-4526-9349-bad45e02ad14
  4 c8ceba0f-ea42-7384-af1e-dccf54443e7d
  5 45954ef6-01c8-5fe6-a472-2bdfe3f29e76
  6 16d5a02b-9204-0f3d-af11-e1b1c7281a5d
  7 2332af39-abbb-661e-b792-397962bb1992
  8 caecee37-2426-2e91-8e89-053a009b709f
  9 9ac3fe40-5617-5a4d-9fea-6c4820e8b6ec
 10 22cf7a93-f71e-3ae3-9f01-c2c15a253b81
 11 7cf6bfd7-52ee-8eae-a8be-885ff3439b27
 12 b6df7d3a-299f-615e-a88e-ce8277b171e5
 13 1c89f35f-0fa7-4ded-8602-7ed5827d4f4c
 14 90a50741-2eb2-4ab0-b197-9e630db3466b
 15 7598852c-3c8c-4062-9328-42d657c66120
 16 c8468233-afad-78b4-8bf3-1170734e0942
 17 1f4dc994-bd81-33c4-a876-b0f31f4a6f7c
 18 33074cdf-a294-27a9-9ef4-2ea5514e8c9f
 19 8bbc4dcd-c6d1-3592-b726-76f8d0d6a31a
 20 d962d95f-a5ef-4ab5-99f5-e30c8e19ae3e
 21 6c77d508-aefb-4d89-8627-87d25a78d5a8
 22 80c31d1b-13bf-4a1f-a46a-0dd7b41913a7
 23 325894a6-ae91-2fa8-ac4f-534850251a6b
 24 3cf84747-f8d9-29b8-9a80-23afc9b9a2f8
 25 ed76447b-1494-6eb2-ab63-d5522d27bb2e
 26 29d13194-e8f1-534b-8fab-043f98f2e67b
 27 d4ac2ab2-0c08-5655-8885-0408fb6de541
 28 3c08d343-b691-6ee9-b036-4b9b12300ae3
 29 3aa5fe90-f7a5-7494-b9f6-489ff2de5c2d
 30 c49face9-75c0-1954-998e-de81ef654030
 31 6534fb73-d7b3-5bc9-aa74-ba85a79edd82
 32 bd6e4523-ec54-8d09-81af-e77b03d8f6c8
 33 4474968d-e7a2-870e-9ebe-7b12269d9a6b

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 324750625386444732344422655671588. Exactly this sequence comes out of new Random(765).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 18 of Run 10 (seed 38,548,093): new Random(38548093), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-02 09:51–10:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs