A858DE45F56D9BC9 archive

201207161130 wnatb

explained decrypted filler

seed 924

Metadata

Post ID
wnatb
Title
201207161130 → 2012-07-16 11:30 on A858's clock
Posted (UTC)
2012-07-16 15:28:05
Timezone
UTC−4 · title 11:30 against posted 15:28 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,704 hex characters · 1,352 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
GUIDs
42
Filler GUID seed
new Random(924).Next(9) ✓ verified
Run
Run 17 (seed 38,757,453) (seed)
Draw
9 · predicted N = 42 ✓
Machine boot
before 2012-07-11 16:41 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,704 hex characters = 1,352 bytes = 169 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 42 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ea527644-0eb4-43e2-87d8-7c4599fe6231
  2 dfcce2b4-b96f-8aff-9582-c0732c050ea4
  3 d0baa54d-efc9-57aa-8087-11f07fe6081f
  4 7b27d729-211c-72ba-afbc-7e75b51cb11d
  5 96a59173-beb8-345a-bbcb-eaaaee9d1982
  6 aee21ee1-7ba1-0a07-be48-b4e15e96ac64
  7 2eab2f20-97ee-82f2-9cc1-28622fab8d2b
  8 7184305b-efaa-8f89-b510-c1814b446a38
  9 621a9457-45e3-2465-944b-8ba877985986
 10 a72116e1-b487-85d1-a0ce-7605c36aaf78
 11 ea6d35a6-c4bb-0160-b166-dbaf869ca932
 12 9e6f02c6-c354-76ce-91db-6fe5cbe68593
 13 815d7070-382e-73a5-88a5-749fa3298ca7
 14 0b8fab84-7af0-11c6-8e0e-c75fb783c38b
 15 140c20b9-16fb-60ba-aae6-8f3e2584ede1
 16 fd5866e2-6857-02fb-8f7e-205bca0e7b20
 17 110aa7b3-9dda-2b20-9759-6107d7316e90
 18 c1cf945a-db03-7168-b0e6-e3ae03d81df9
 19 53ebb7d9-2b93-6ccb-83f8-70e9058bb513
 20 f2996153-7842-0940-b04a-a1d7ac1ca0ac
 21 b5eebe9f-9afd-5f9b-8261-02fe49bbdcf6
 22 378c5f73-e9ac-4ecd-b89e-1717c0336c24
 23 c004830a-5d9b-1da0-afe0-8b05a5ff3a67
 24 0d1778c1-983c-7fe0-9950-dd540ee69b27
 25 8aa6a890-3795-25e9-b41b-278524f3d5b4
 26 c4140b39-e455-747e-ac22-f951010e4d76
 27 01b02e18-48d1-34ef-a1b8-a5e1e0418eb7
 28 cd0c959c-2ae3-1b84-83b0-2f327b119885
 29 64ff06f2-5f40-6bb5-8d21-23dc305f76e4
 30 17e68d00-f121-2f20-a8f2-e48743c2d858
 31 09b5d851-d02f-2588-bd37-f33b00d34fe0
 32 5143c19b-b95a-7b9a-819f-d7aa1d5399ed
 33 09cb5c03-86cc-7dcd-aebc-76b5def1d435
 34 7bb38ed7-64f1-10e8-a983-55c32c4f2526
 35 1c50bb4b-5c5a-2105-ae36-3893b6a86a2c
 36 c602a30d-f6ec-7a84-a586-7d2adacf0d36
 37 2bca6056-bb8e-3460-8242-4ecd1232bff4
 38 58e1c3ac-13b3-08c9-857b-96ec2a3cd3cc
 39 4c34f6a0-3685-5877-b945-fd1b430111d6
 40 5befa41a-bc7c-5340-839b-823e6f41fe86
 41 f72b5dca-a6fe-7771-b378-c38351e3c9b0
 42 9fc3577d-e409-34c9-98fb-6e92d08fd8ab

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 485730882807716027605417273162277127305573. Exactly this sequence comes out of new Random(924).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 9 of Run 17 (seed 38,757,453): new Random(38757453), Next(8,64) per post. The RNG predicts N = 42; the post has N = 42 ✓. The seed is the machine's uptime in ms when the app started (boot before 2012-07-11 16:41).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs