A858DE45F56D9BC9 archive

201207071209 w6jn6

explained decrypted filler

seed 651

Metadata

Post ID
w6jn6
Title
201207071209 → 2012-07-07 12:09 on A858's clock
Posted (UTC)
2012-07-07 16:07:29
Timezone
UTC−4 · title 12:09 against posted 16:07 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,192 hex characters · 1,096 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
34
Filler GUID seed
new Random(651).Next(9) ✓ verified
Run
Run 13 (seed 19,267,593) (seed)
Draw
15 · predicted N = 34 ✓
Machine boot
2012-07-06 10:46–12:16 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,192 hex characters = 1,096 bytes = 137 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 34 GUIDs as hex (shown below).

Decrypted: GUID list

  1 49af1696-985e-7bd1-805b-4568a9b89961
  2 f6310a99-89a1-7f62-81ea-e03d7c0e0c32
  3 58907a63-58de-7c1c-98c6-29fbef13c96f
  4 32467390-2338-49b4-bc3e-d10eebd7fd21
  5 a2f78ee2-2041-1694-a3f0-d4cf6020ae99
  6 992f07cc-69f5-4ee5-906c-fcef4a165a52
  7 4b2cdb72-89ce-560a-be34-1d97f106cd13
  8 821ddacb-4c5c-0901-ae42-556ace269f4d
  9 1cfed158-d614-4884-8790-6c57f78a56e3
 10 7aea5596-3b2b-237b-96a4-31caa430c4d4
 11 a24c6777-fc46-8a8c-bb1c-eb428100b6ec
 12 7f67fba6-6ded-66d7-bdd0-3b8483c3f9b9
 13 4f8a1ecb-d6f3-1f31-800b-e4c91376e458
 14 cc2c77e2-6a94-11c0-af79-14a65f64a736
 15 71e99e9e-bae3-5629-a4e8-6dd3e9f65710
 16 0f48fc60-e7b8-5800-a2ec-914eb82f7cc1
 17 e41345a9-59b5-47c6-90fc-7b58b4bd0e65
 18 e5dba6f7-4245-5710-bf1d-a89516a553a5
 19 2b0f934d-b90b-2502-97e3-b71d4e74e0cb
 20 5a925db5-dc5a-3d8f-82fd-889c26f249a8
 21 8d5709b4-fc2c-2d5f-8bb8-f2af698cca4b
 22 479efd1b-0f4e-5906-b98c-263b82edc3d0
 23 7a551f4a-f9ea-03fb-977e-f926adaf7e4a
 24 ca1baf82-ca6b-43c0-aba3-4e00607774d4
 25 93cc4af2-b248-43f9-8e16-6a14ed269272
 26 55dba857-bbf3-2ecd-8ced-aff82de869d2
 27 0f49750b-c7ee-557c-9bbe-ba905a59ac78
 28 8d121002-9b31-0a7c-8308-61604b71a89a
 29 932f9bcf-77c1-3527-b73e-6efcbfbe8d4d
 30 0f0eae59-30ef-3c3d-9de8-e47727268831
 31 ada029eb-2fd9-44c1-adfc-5c8d78a366d5
 32 149005e6-d314-821e-96e1-3c606dc78fa2
 33 c8fef2c2-5623-078d-bc23-08d289d536e0
 34 23cf18c6-7a03-22d9-8728-728454126f00

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7774145042861155452325044250334802. Exactly this sequence comes out of new Random(651).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 15 of Run 13 (seed 19,267,593): new Random(19267593), Next(8,64) per post. The RNG predicts N = 34; the post has N = 34 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-06 10:46–12:16).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs