A858DE45F56D9BC9 archive

201208032137 xm7qw

explained decrypted filler

seed 131

Metadata

Post ID
xm7qw
Title
201208032137 → 2012-08-03 21:37 on A858's clock
Posted (UTC)
2012-08-03 12:34:39
Timezone
UTC+9 · title 21:37 against posted 12:34 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
GUIDs
32
Filler GUID seed
new Random(131).Next(9) ✓ verified
Run
Run 22 (seed 528,385,484) (seed)
Draw
7 · predicted N = 32 ✓
Machine boot
2012-07-27 19:02–19:13 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5439ac2b-234b-111c-a343-887f8f07adbf
  2 bff035e7-a487-2aa6-a7f7-615d322de57a
  3 ee79d73a-055f-3463-9f66-41c80e5ac6c1
  4 fb070339-8172-4c9a-a6c6-9c354c3b45c3
  5 4932f535-7c44-3c9b-9725-dcf5ee6f6933
  6 88d56983-4bdc-0d97-9636-38d4f453a82f
  7 3c608d17-962b-5c75-bd5c-29bc4db75c8e
  8 bfc94a0f-a5ae-1914-b230-a648cddd02a6
  9 dcda53c4-f809-1488-a9b1-bf18bd1c6d03
 10 0cc27ade-118f-5ae8-9cd7-b0ce65d9b849
 11 06f945e7-0315-7424-beee-69e1aaad39e4
 12 ad11b707-ff64-607e-845c-1a05501d4150
 13 9c500177-dc14-6c73-a177-b255fff54334
 14 80db8f17-5a08-5bc6-8bf8-f8ad155961e6
 15 faddcc7a-378a-69fa-b570-3569393547de
 16 ce13ae0c-a982-7931-8003-67be3248f151
 17 7fd26fc5-1607-8c18-ba17-b8da2912e4f0
 18 d69d9f5b-6ffd-1c5d-8b26-dc8340a5c784
 19 7ec3f018-7003-2ac2-8e33-8669efd5e1a9
 20 b303c968-f8fc-0ef2-8920-4caf495fc702
 21 fd7c7fff-0119-26a2-aa73-de60508f1220
 22 35e75924-3073-82e5-a9f3-50ae37a17918
 23 20c3eccb-bb1b-15ce-83dc-ca31f2b788f2
 24 919dbc69-1963-789d-bea1-cef5bba0b564
 25 4c3181ce-bf09-48fb-a6dc-633f2d2cc86b
 26 7b4b488b-b19f-7920-bdc0-f238dbe5ef8c
 27 e9baa0d9-4511-52dd-8cc5-07b13366835f
 28 3fa8b6cf-ae86-75e1-b27e-f8c8a74ef8a0
 29 0e90b788-6ec4-60a1-8112-c37f07b59bb9
 30 e154fa59-29b4-56ae-83d8-24bcacdd8251
 31 159a14be-e941-4731-9749-8ce39ea3d895
 32 743621f6-dd49-8710-acf5-87d37ab5a3eb

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 12343051157665678120281747576548. Exactly this sequence comes out of new Random(131).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 7 of Run 22 (seed 528,385,484): new Random(528385484), Next(8,64) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:02–19:13).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs