A858DE45F56D9BC9 archive

201207060336 w4c45

explained decrypted filler

seed 24

Metadata

Post ID
w4c45
Title
201207060336 → 2012-07-06 03:36 on A858's clock
Posted (UTC)
2012-07-06 07:34:48
Timezone
UTC−4 · title 03:36 against posted 07:34 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,256 hex characters · 1,128 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
35
Filler GUID seed
new Random(24).Next(9) ✓ verified
Run
Run 12 (seed 36,542,234) (seed)
Draw
17 · predicted N = 35 ✓
Machine boot
2012-07-05 10:25–10:55 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
7 · 1
Tags
automated (decryptable)2012Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,256 hex characters = 1,128 bytes = 141 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 35 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a795c38c-8c39-2acc-aebb-cdba3bd5746b
  2 8610f60b-a2ee-7562-9f71-5619bd5a6f4d
  3 5f361bc4-78e9-408f-b0dc-a811ce50ea4c
  4 4b01467b-53a3-691e-8a3f-67549cfea74a
  5 18c11634-c0e3-0752-8b2b-aa647bb2d17a
  6 4d5a37a0-4fda-4b68-8777-0b7e283e1ace
  7 26a5011a-5888-593f-b3ac-82daef76400f
  8 1538e509-cb1a-41b9-810f-ce514360001b
  9 d8f95650-ea53-8d8c-a5d3-54575ee176ec
 10 eb787131-bab6-198d-899c-185220ece912
 11 9e1fde45-6a5e-824a-8061-de379b54a10f
 12 ed111642-93a7-1e32-b191-d46855282576
 13 9b9b7cb0-8a1f-1fb1-85eb-b75cf12ca1e7
 14 a69aa5c5-ac99-891e-9cdd-0522c1cb6adf
 15 032f3d59-d45a-736c-a155-38d8daed819c
 16 56fbdd0c-75c2-0f49-8472-4a32157d68d8
 17 702e7222-2e4e-8a18-b4c7-826943814af8
 18 e2aa9e98-473e-71c1-83f1-0ab5fb56b03d
 19 58dd9d9c-10c6-2c00-9a3a-ba0213dca6c8
 20 2472c209-4267-5107-85d8-13677ae09963
 21 5adc8d45-d03c-0189-a886-e36ffc243e19
 22 d1772e74-13cd-63cb-b7a9-bfdc87383525
 23 d10f1f38-a289-05b7-a95f-d9bb32447c7b
 24 1ed7ab9c-b4af-3363-9e4f-72a1c1a42860
 25 925cf06b-d0b4-09f4-8b2e-236d7861c324
 26 200d8266-65fc-8a62-8d10-18f09c4f0022
 27 45d6bfc8-9765-5147-8816-acc81aa94a6c
 28 853ad6dd-50c4-54c5-a42f-0eda201735a5
 29 6d0d7643-6379-1644-a3b0-c9cc2ae68d1d
 30 85b012a3-e31e-36fe-aadc-ec27fda6eb50
 31 f37f3590-9eab-0b80-8acf-06e75f04deef
 32 bbf9863a-8616-65e7-82d9-95e19f226262
 33 b3a3eff2-a8d7-82db-9ed9-9a3496118b3b
 34 e22c20d9-868a-57ea-b7f9-8d5df14c5550
 35 a07e4986-5d5f-036d-85ee-9d3562530c9e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 27460454818118708725060308551306850. Exactly this sequence comes out of new Random(24).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 17 of Run 12 (seed 36,542,234): new Random(36542234), Next(8,64) per post. The RNG predicts N = 35; the post has N = 35 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-05 10:25–10:55).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs