A858DE45F56D9BC9 archive

201207180103 wpfry

explained decrypted filler

seed 259

Metadata

Post ID
wpfry
Title
201207180103 → 2012-07-18 01:03 on A858's clock
Posted (UTC)
2012-07-17 16:00:52
Timezone
UTC+9 · title 01:03 against posted 16:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,704 hex characters · 1,352 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
GUIDs
42
Filler GUID seed
new Random(259).Next(9) ✓ verified
Run
Run 16 (seed 39,036,328) (seed)
Draw
11 · predicted N = 42 ✓
Machine boot
2012-07-11 17:05–17:10 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,704 hex characters = 1,352 bytes = 169 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 42 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ccf4967e-71de-063a-bc2b-4c2af62761d6
  2 c92ec11d-fd7f-7f55-885f-a6ce6f4a9f6b
  3 a8c55503-7f5e-7440-9e91-2792067b2359
  4 750574f9-24ce-77c0-9d66-f6204279f039
  5 d1a3f4f5-a7f6-15ca-ac41-c1873150c234
  6 b3738051-0d37-8f21-8400-db14a9dfdf34
  7 23968a6d-665b-896e-8b6a-c83d925dd40b
  8 de480f98-afd6-32cf-87c4-fd4147a74c17
  9 ba249dd2-50f0-087a-8bc9-620b0d364aa7
 10 c29f9ad6-7eee-764e-b8dd-d41eaf797014
 11 a6a69b97-bf24-057c-b5b6-83bff418b574
 12 6c1631f1-e99f-6b34-b3fd-261876078ca1
 13 3f825d5f-2fb4-6665-b71e-33fc2be37fd7
 14 8e29829c-5e49-1ece-96fc-a554f01c043b
 15 bb9c35dd-3b5f-2a84-a705-65624176a68d
 16 cfb56c6c-41df-7529-9513-734929530c82
 17 b0cf8fdb-af0a-6e1f-9198-e5a1d85779ee
 18 345095ca-fcbe-5335-a0ad-4b280ff59c8f
 19 c92f22d8-2a91-6b14-b826-2beb380616cb
 20 06a3b969-6ac0-571d-b01d-b4c1b245b35a
 21 94aa910d-37a4-2b92-9590-66412e7a8de6
 22 a2af81a6-a519-3440-aec5-85b5460bf0e0
 23 89dd41d4-e0cf-6247-b861-8522cf09ad25
 24 6618952a-7015-4af9-ae52-783564512b1d
 25 050b6083-fbd1-0f44-b42f-a219697f53b3
 26 6bbb50bc-9dc2-04cb-8374-8e2e0fb81213
 27 7d1a5fc8-dbe5-58df-9d50-494bddd45f0b
 28 2d9792e5-4fbd-1c75-b751-04f1e86fe740
 29 5368df25-ddf6-0a7d-b6eb-e5a48ad3984f
 30 bcc40ed0-6200-6ef3-bdd0-3080b98ef483
 31 0deb331d-7d65-79db-b53b-8f2577c6967c
 32 ff73b0f1-fb90-626b-ad8f-706baed20507
 33 c8bc4ed8-8753-428a-ab8e-207c57c58045
 34 743c7eb6-e4e5-4f20-8fd5-4d2d49667f3a
 35 78e6ff6b-2bf0-0c8c-ba6d-faf20208512c
 36 ac00ea0b-1f72-8b3f-b0e5-c4d4efb5df55
 37 85444038-26c9-5766-97a1-bfece764b158
 38 598a89ab-ae56-87ce-94c6-525d7f70d1d6
 39 baa5ce18-24be-6c18-8110-d541a88d6cfc
 40 e97c52c7-9b06-0af8-9357-ec4d69bbc9d7
 41 4833ede5-dc2c-3dad-9891-010ba515fe55
 42 502d65e9-83aa-6184-8954-b8e134b5d12d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 077718830706612765652364005106764408586036. Exactly this sequence comes out of new Random(259).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 11 of Run 16 (seed 39,036,328): new Random(39036328), Next(8,64) per post. The RNG predicts N = 42; the post has N = 42 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-11 17:05–17:10).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs