A858DE45F56D9BC9 archive

201207051736 w3he6

explained decrypted filler

seed 417

Metadata

Post ID
w3he6
Title
201207051736 → 2012-07-05 17:36 on A858's clock
Posted (UTC)
2012-07-05 21:34:27
Timezone
UTC−4 · title 17:36 against posted 21:34 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,640 hex characters · 1,320 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
41
Filler GUID seed
new Random(417).Next(9) ✓ verified
Run
Run 12 (seed 36,542,234) (seed)
Draw
1 · predicted N = 41 ✓
Machine boot
2012-07-05 10:25–10:55 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,640 hex characters = 1,320 bytes = 165 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 41 GUIDs as hex (shown below).

Decrypted: GUID list

  1 27f25e8a-a7ee-50aa-b1df-465c6225fc7c
  2 d2102311-ccc1-1010-b6a0-8518b72d6c59
  3 f9026708-8de8-271a-8a85-6373d2fb2e79
  4 9d035f90-8ec5-53b7-bb47-208b6e3c317c
  5 5d7c3924-6599-4bf7-9402-d42d9730323c
  6 0efcac77-e8d4-8638-a2c7-1ba8fca6f2d2
  7 0655b17f-27ad-662b-82a1-666f1c7364b7
  8 bbbafd6b-b58b-528d-8617-128d666b552e
  9 c8214cd0-10e0-5b2e-951d-ba5c4ca1ed20
 10 db678f29-34e7-0c83-87e4-9c6f5585aeb4
 11 cfbe8d92-5a81-4f73-999b-7412f449e3bc
 12 ef88356f-8f01-03e5-9416-fd19a53e8aa0
 13 23c76c89-e557-2a0e-982f-df5b2fb00ae3
 14 da7153ae-3441-391a-951d-5b20e1ad7e66
 15 5cd70e5b-6508-7688-a699-4b33c8f8ca4d
 16 ce63a1a4-4d50-47aa-a35e-c9d894896344
 17 bf405aa8-eb7a-1249-8736-b338205d87ce
 18 92676c4b-6d7e-4197-baba-27ba9466695a
 19 f7ada8c1-a303-8867-81b0-4ddde483720c
 20 56c8ec85-3731-7df8-a4e9-df242e3a398a
 21 336e16cb-ca74-2ba3-9923-f306fb4b58f6
 22 235d4c08-4561-1e5a-bb4c-225387f22a04
 23 0fbc6d5c-6013-4362-b2b2-bcd271977ae3
 24 1eff95fc-54bb-69ec-adea-3a75dc0c08cc
 25 3363a781-c743-53ab-8820-34d83c1a0884
 26 3362b731-c002-6aef-b699-c8526d6f8e8f
 27 fbcee499-9982-40b4-bb58-ff4b4e32ad0d
 28 accbb1e2-d515-0ace-9f05-1f12f06ffefb
 29 069191cb-de2f-60b9-9c96-66af86f45674
 30 e08905c0-a44a-83e2-b8e3-d3b401be2c4e
 31 3903cdac-b14c-1859-8a81-1f87ee976996
 32 c8db10a4-441a-2c94-9535-ec80477f27cb
 33 4b250e3d-349e-822c-b248-a89e087e0506
 34 d8438c01-d359-3ec6-b685-4fe32f21ba12
 35 a1d50939-3338-288e-b3ce-71b314330bc9
 36 93685e4b-cb2b-7297-a9b1-88dda526197d
 37 fe9f8fcb-a61f-44c9-b5b8-b6ec41606905
 38 bffc278d-b8da-52c2-b836-88bb1acbafd3
 39 9a672c5a-28b3-6e4c-90d8-5ca5d2d9db81
 40 178b45e6-58e3-67f9-92cb-01f6d87c6d81
 41 24c4cd9a-c0d2-5eaa-87a2-2f2fe9b6e93e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 51254865504023741487214656406812832745665. Exactly this sequence comes out of new Random(417).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 1 of Run 12 (seed 36,542,234): new Random(36542234), Next(8,64) per post. The RNG predicts N = 41; the post has N = 41 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-05 10:25–10:55).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs