A858DE45F56D9BC9 archive

201207070309 w652a

explained decrypted filler

seed 948

Metadata

Post ID
w652a
Title
201207070309 → 2012-07-07 03:09 on A858's clock
Posted (UTC)
2012-07-07 07:07:26
Timezone
UTC−4 · title 03:09 against posted 07:07 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,744 hex characters · 872 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
27
Filler GUID seed
new Random(948).Next(9) ✓ verified
Run
Run 13 (seed 19,267,593) (seed)
Draw
9 · predicted N = 27 ✓
Machine boot
2012-07-06 10:46–12:16 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,744 hex characters = 872 bytes = 109 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 27 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9792728c-76d1-8f27-be50-0025747522de
  2 88050c60-88e3-8111-965c-0c251353d2f2
  3 d9ef4f69-d983-3730-8982-b7658b9ea7e0
  4 9abd626f-c02b-8fdb-b81d-a9c67421d8ea
  5 f2b0f9d0-9aef-1648-8414-e0ee1f97c67e
  6 598861a4-e7d5-072d-8589-0f5b75944297
  7 40368fba-35cb-5746-96c9-984ef7c1d905
  8 71836321-1ca7-05c4-aeff-720145c754bb
  9 6c903305-81a3-2d33-b0d8-d515264667c5
 10 79c0c5d5-eeab-787d-8e4e-f8c669b80e6b
 11 b11d40f3-2fec-6059-9d29-0719ea0fe176
 12 ee015fe3-a8bb-5429-b8c9-d3b41a9d9cb5
 13 410bb9ec-1914-323b-9433-30d5d06ca2a7
 14 81551673-dff7-620a-b37c-32977ff3dba2
 15 ea73b21b-d254-4650-9c8c-044c0e2ae1b4
 16 88d50607-14c5-011e-8282-5a89b63ff028
 17 9a688eae-47d8-307a-90ba-b275c3c5e79b
 18 0f1b827c-5e44-6d9e-9bd1-fe419ba517df
 19 9918df07-2dac-3bbc-b44b-654b06767de9
 20 2f233839-4c13-304b-b065-55a0a3406e2c
 21 85c27064-9f9f-766f-bf1a-6edeec7d4416
 22 9d842e63-6abc-3340-b75c-7a7035ade7b1
 23 bee0ba7d-276e-1f09-9a0c-551ca6381381
 24 9d09f5d5-c1f8-1c10-aedf-034c009d85b0
 25 302729f1-f261-55b2-a085-cd60392f185c
 26 9124d944-0256-2434-8ac7-0e05297faf3d
 27 258bc587-7c2d-8e1f-929f-ccc22729431d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 883810502765364036337311528. Exactly this sequence comes out of new Random(948).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 9 of Run 13 (seed 19,267,593): new Random(19267593), Next(8,64) per post. The RNG predicts N = 27; the post has N = 27 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-06 10:46–12:16).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs