A858DE45F56D9BC9 archive

201207090143 w9amm

explained decrypted filler

seed 859

Metadata

Post ID
w9amm
Title
201207090143 → 2012-07-09 01:43 on A858's clock
Posted (UTC)
2012-07-09 05:41:44
Timezone
UTC−4 · title 01:43 against posted 05:41 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,000 hex characters · 1,000 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
GUIDs
31
Filler GUID seed
new Random(859).Next(9) ✓ verified
Run
Run 14 (seed 205,976,312) (seed)
Draw
12 · predicted N = 31 ✓
Machine boot
2012-07-05 08:28–12:28 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,000 hex characters = 1,000 bytes = 125 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 31 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5591931f-ed61-4d96-a52e-6d19d9333b6b
  2 7e4542b1-30ee-7990-a50f-01903d826219
  3 f70125a0-b319-14ee-b7d3-32e2f5c13dfc
  4 4a3a924f-c8c0-85ca-8b58-92558d95f2f5
  5 cb1328d6-ef11-0983-8704-e75f80f0ddc2
  6 3bdb8275-d96f-2eb0-81fe-3d54dc63490c
  7 fb98d0a1-03b8-7125-9c47-59ffa677f3f0
  8 9d1da6f9-0181-37e4-8561-a7ce6875d0d2
  9 058bb61c-d240-283d-990c-509a54d770fe
 10 4d8533b9-10d1-0900-a891-897327c4e6fb
 11 b337c8da-4a54-1a2b-ac79-16337c4b0fb0
 12 a1c697e2-72ae-016a-86cf-671e1f3e5095
 13 1f594a8a-25af-18e6-a54d-6fc1c37e4fe0
 14 126e00f5-03a0-3442-97d6-e626f16d4e2c
 15 e9348ab1-aa7c-2b63-b4cb-66c940fcdd51
 16 006da6ee-1a6c-4239-bf31-b361c659e5d0
 17 ea2f87ae-1162-8db8-b4b1-e599685175d1
 18 b8c8c693-85f3-51a8-ab19-d098d2f48b75
 19 cc35ec49-b051-88cf-a1c5-890c5d7b867f
 20 0c7d346e-5831-8c7f-b8c8-71b3df0b4e67
 21 889c8e24-2a1b-8beb-a868-37f261ca0551
 22 541acdd4-0271-5df9-bd18-e4767fbaa2a7
 23 5b56fdb1-4f95-15fa-af95-3c348a14c1c9
 24 2e56fb81-40bd-1653-bca5-e201bd5a4605
 25 4ed4df7b-4cf0-7349-a568-bff391fe1330
 26 bf71159e-6a7f-0fcd-ae72-74ae7ab595c4
 27 ce9063b2-df70-434a-91db-9835245ad610
 28 febd9197-78ba-83a7-b686-a1ac2bc8c552
 29 6603e26c-02ec-7966-ba19-ebbb2daa0324
 30 48e2aecd-0064-7501-9ca5-15edabc95593
 31 940456ca-28e5-21b9-a60f-9137dd2450e8

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4718027320101324858885117048772. Exactly this sequence comes out of new Random(859).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 12 of Run 14 (seed 205,976,312): new Random(205976312), Next(8,64) per post. The RNG predicts N = 31; the post has N = 31 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-05 08:28–12:28).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs