A858DE45F56D9BC9 archive

201207071806 w685c

explained decrypted filler

seed 298

Metadata

Post ID
w685c
Title
201207071806 → 2012-07-07 18:06 on A858's clock
Posted (UTC)
2012-07-07 09:04:19
Timezone
UTC+9 · title 18:06 against posted 09:04 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
28
Filler GUID seed
new Random(298).Next(9) ✓ verified
Run
Run 11 (seed 37,057,156) (seed)
Draw
34 · predicted N = 28 ✓
Machine boot
2012-07-05 09:16–10:46 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 bb11dbe7-5133-3302-9e74-8a568d26a603
  2 b42ed53b-2b2d-2721-88c5-db54ff34b9e5
  3 c1f9dd31-4b48-0e53-ab0e-3207174c0a98
  4 b0554dc7-ae04-122a-b71f-51a26de54916
  5 9c289568-dfef-60a9-9939-5e7fb6de542f
  6 9efe60a2-9e3e-82c4-a12a-cfb0e246cd03
  7 13f455c6-e634-3840-83cd-51606b24507a
  8 1838f98b-476f-8990-b723-97e1c8781d47
  9 76f33a89-39d0-79f3-9765-15be029ed5d4
 10 e48fd142-d63a-160f-ae77-d389b3fecb69
 11 fac5b932-5799-7c73-9249-b325e05a789b
 12 997995ca-12ba-1145-8bd6-eb4f2849aba7
 13 079fe386-18c4-45b9-b54e-be3024b2982f
 14 ebc4ef95-24f2-4cfc-b865-5f51b19f5fb4
 15 0c713958-199a-5cbf-9823-85d1e14ae24a
 16 64510b3f-492c-1337-9a7a-98b2b48d47f3
 17 4268a80a-5050-10f9-a2d3-54d931161c07
 18 e6f5d633-ccbf-6f4b-97bf-0b24205cb1a3
 19 cafbad8a-4d54-610f-9052-f3b9f5bfc223
 20 77a0967a-87bd-644d-94ba-59cc073b183c
 21 55ff7a5a-b14e-3b10-8254-c010c9757fcd
 22 b024da98-cce0-840d-820c-ec1ac844f4bd
 23 9f1b807d-a3cd-3a90-bcc6-b52432a53ee7
 24 bc5bb520-638e-1fc6-875d-5930023447c2
 25 f5f14c26-380e-825b-9b3b-ebf837fdcc54
 26 df2875b7-95f0-1e60-bf02-d706f24d7323
 27 4c16fa81-dbcd-1c27-830f-13116050cc59
 28 988b73bf-8ad5-2603-b040-7f0eed0a71e0

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3201683871714451166638318112. Exactly this sequence comes out of new Random(298).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 34 of Run 11 (seed 37,057,156): new Random(37057156), Next(8,64) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-05 09:16–10:46).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs