A858DE45F56D9BC9 archive

201207072236 w6dwo

explained decrypted filler

seed 345

Metadata

Post ID
w6dwo
Title
201207072236 → 2012-07-07 22:36 on A858's clock
Posted (UTC)
2012-07-07 13:34:21
Timezone
UTC+9 · title 22:36 against posted 13:34 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,872 hex characters · 936 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
29
Filler GUID seed
new Random(345).Next(9) ✓ verified
Run
Run 11 (seed 37,057,156) (seed)
Draw
37 · predicted N = 29 ✓
Machine boot
2012-07-05 09:16–10:46 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,872 hex characters = 936 bytes = 117 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 29 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3eabbd65-563b-893f-a938-a5d0e46fd98b
  2 1630f2a1-cd7b-0681-b482-850236a47fde
  3 395927b0-bb30-8441-a578-c49cb8c01d95
  4 b522046b-bcde-16c3-b983-da4bda7e6aff
  5 08ffd15a-8347-8ed5-9cd4-a366cda8bf41
  6 a31c213f-c5aa-098c-aa93-b4448e77f348
  7 270786f5-33c5-46a7-b316-e9ce033809b1
  8 16b2fed3-879b-4b90-b9be-34eabb921fc2
  9 1904debd-a45c-5433-b8f0-861bcc82549d
 10 77f88752-2d70-42ca-bc61-1ca8e9fd6267
 11 37ceb854-9381-4147-9f3f-8f99b0487d25
 12 8bc4d383-4264-7065-aaf2-4a79cf43703a
 13 2848d60b-3cba-7046-bfdf-da38c9abfc9b
 14 bc47f700-710a-8f74-b3b1-57a900ccc7af
 15 59b1b52d-52c4-4682-8ed8-a44cbd27c413
 16 c43aa13c-3c0e-4946-9df4-0fe09d74e629
 17 163615ef-1c78-79b5-a3dc-3003e5d3cfdf
 18 dcdede7d-9627-844b-abbf-110d466df750
 19 d4331281-2855-0dfc-8117-10495c91fc3b
 20 a4c3824b-8b5b-8dc7-8b81-8cea9acf01a3
 21 5c389525-5748-5be3-94f6-f82ca5fd68f9
 22 d2c86c42-f9f6-4fea-9dc6-b3532e96f950
 23 06de4afb-a0f3-2784-ac32-90304ac82173
 24 f3a47328-9292-5419-880d-9728a6efea87
 25 f9fc4d5d-4447-4c49-8a0e-92f83a99b8d9
 26 a07a2dc7-6dad-3318-836b-65a37cdb06b4
 27 e4dc7cad-d3e3-4651-8099-d9ca1f3e7f65
 28 31868880-6300-474c-8c4c-a50b4f999ff7
 29 e16740d8-a062-7030-8698-7e63aec69ae0

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 80818044544778447808542543447. Exactly this sequence comes out of new Random(345).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 37 of Run 11 (seed 37,057,156): new Random(37057156), Next(8,64) per post. The RNG predicts N = 29; the post has N = 29 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-05 09:16–10:46).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs