A858DE45F56D9BC9 archive

201207072106 w6bq0

explained decrypted filler

seed 579

Metadata

Post ID
w6bq0
Title
201207072106 → 2012-07-07 21:06 on A858's clock
Posted (UTC)
2012-07-07 12:04:20
Timezone
UTC+9 · title 21:06 against posted 12:04 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,256 hex characters · 1,128 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
35
Filler GUID seed
new Random(579).Next(9) ✓ verified
Run
Run 11 (seed 37,057,156) (seed)
Draw
36 · predicted N = 35 ✓
Machine boot
2012-07-05 09:16–10:46 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
11 · 7
Tags
automated (decryptable)2012Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,256 hex characters = 1,128 bytes = 141 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 35 GUIDs as hex (shown below).

Decrypted: GUID list

  1 354a0519-50fd-19ea-8bc6-16035d4c4f75
  2 493d2d7c-bf0a-67ff-a7f8-db2fdd8e95c2
  3 7c4909d5-194c-4cda-8019-5625384d8347
  4 38ad6b64-b54a-17b7-945c-ff316ee21104
  5 94be39f4-a264-584c-a0ad-b1b7d77a0276
  6 32688cb0-c342-41f8-bf2b-9ce2d7d8b265
  7 912cff63-f8ff-28c4-956b-c08b4b389bea
  8 67b62da6-7b94-848f-a05a-55414ea42d12
  9 c0d64e42-f7a6-5810-80ba-5d95424f387d
 10 b8f433ee-7cfb-7d2c-8235-5fce3477c1b1
 11 dc1a1e24-dd63-7b96-8611-3089ffe5df50
 12 3fd76243-80fc-4a47-9d05-682d3c96c6d1
 13 bf3f2756-fe0c-6ddf-8eea-3d59bcd61f83
 14 bb9fc227-2a61-60d1-a435-a1b118451853
 15 87295c60-d4dd-2353-9806-4c7514873248
 16 39687558-c91c-56bb-a556-ec9939cb4842
 17 92b44731-b99a-2029-94de-4164976e590c
 18 db00c3b6-03c5-879f-9011-e4e8f122a107
 19 32df7cb9-e6d1-368f-bc6c-d61095eda350
 20 d30e57d7-87d5-4f45-870b-e887769d0a0c
 21 8d104482-b5e9-6492-b9de-574962220cac
 22 6a7dd6d2-d861-8060-aa30-e67d2ee40e9d
 23 434e5699-d046-7dec-93a2-1db1fceeac07
 24 f11364df-4bf8-2e38-9d74-1f4ee5d16255
 25 6698f7a3-7b45-418b-bdbe-3e4eecf3add9
 26 a5691858-d9a4-8182-9897-139d4a1232cc
 27 6f7283a1-ca47-6e0a-b076-72a130f43f85
 28 c4ff6ca1-ddbc-3192-be64-a07c9ea547d2
 29 275f6e32-6a0a-46a9-9638-6228eb7f69cb
 30 e8960429-041c-312c-969c-077e44cf0c89
 31 d150fa43-cb28-86c2-862c-ea53b1ab1395
 32 29dabeef-a563-8008-b504-a348b3323040
 33 070e0159-5ae7-1c2c-b50f-85b77cebf8b4
 34 83cbc9e5-7a05-4d9f-b5be-9690ebe947cc
 35 ac1154a4-cda6-7956-8b78-8c00aa8caa04

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 16415428577466252834687248634388147. Exactly this sequence comes out of new Random(579).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 36 of Run 11 (seed 37,057,156): new Random(37057156), Next(8,64) per post. The RNG predicts N = 35; the post has N = 35 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-05 09:16–10:46).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs