A858DE45F56D9BC9 archive

201207051806 w3j3d

explained decrypted filler

seed 576

Metadata

Post ID
w3j3d
Title
201207051806 → 2012-07-05 18:06 on A858's clock
Posted (UTC)
2012-07-05 22:04:28
Timezone
UTC−4 · title 18:06 against posted 22:04 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,192 hex characters · 1,096 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
34
Filler GUID seed
new Random(576).Next(9) ✓ verified
Run
Run 12 (seed 36,542,234) (seed)
Draw
2 · predicted N = 34 ✓
Machine boot
2012-07-05 10:25–10:55 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,192 hex characters = 1,096 bytes = 137 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 34 GUIDs as hex (shown below).

Decrypted: GUID list

  1 db02d531-cf3d-5571-bd64-f7cad7fadbac
  2 dfb890d3-f367-76a0-9bc4-103804843354
  3 74e08c92-dd40-3de2-a96e-931cbd09c338
  4 76a1e73e-c4e7-4108-a93f-d27af5c48f7c
  5 5e0752ec-5e15-2446-948a-371a6e982c6a
  6 639705d3-2882-8344-b56d-436aa157288e
  7 6d24852a-8bb8-8013-b0c5-a985470adfd8
  8 376aaaa1-5145-3601-b840-ba837984ced1
  9 acdd832e-1000-2933-ba5a-2ee13e73b3fb
 10 8fb5c72a-5faf-6681-9367-e1ee3cb7c08b
 11 2b51e121-de33-58f8-ba0d-090ff90d1886
 12 6cf950e1-d754-1eb0-9dce-424b831ec0be
 13 a70bcbc2-13d3-56d3-a0c6-d72abd25fff2
 14 50969c1f-bd13-1842-b1b2-65e401960bc6
 15 a6d69380-08b4-19a5-922a-a52e9a97cbdf
 16 3990f42e-dc09-664e-8936-4777809302b4
 17 066b389e-9b83-8deb-9689-d99a87c22f04
 18 547c2e1f-a6f8-11a4-b6b5-43fea7552894
 19 7380b639-9683-2f2d-84aa-496715a8200d
 20 80d252ce-a635-3bda-a981-16a1c9e66ba1
 21 7c5cf2db-84df-344c-a810-455b3610adf3
 22 1d530c72-19a8-1e34-b8e4-fb0f8d9de61d
 23 2fe2565f-6c29-37c4-aa3b-bfdf60f8d0e2
 24 554f06a9-b028-2c43-9c97-223413866171
 25 e7e76777-c02a-17c9-87a9-f3c372648aea
 26 6bb735fb-ab21-813a-bd37-637c8282dd7b
 27 ae1ec208-0058-1aea-9443-233d3ecda84d
 28 7ba1ac88-0ca7-53d3-a99b-1a104b878765
 29 c7d180ea-bc85-580d-b350-db53e6c5c7b9
 30 fe1acb77-6de1-8b45-9cd1-4605e7764e1c
 31 2ce8c68b-1269-79b4-b856-f20867d1e4f1
 32 9fb9e807-32c8-1210-a77f-8542aea280c3
 33 33fca3e2-c5ec-880f-94b4-c032ef6ab74e
 34 2801cc55-b61e-38ef-85f4-5fdabe3b6869

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5734288326515116812331321815587183. Exactly this sequence comes out of new Random(576).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 2 of Run 12 (seed 36,542,234): new Random(36542234), Next(8,64) per post. The RNG predicts N = 34; the post has N = 34 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-05 10:25–10:55).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs