A858DE45F56D9BC9 archive

201208120040 y2xe5

explained decrypted filler

seed 673

Metadata

Post ID
y2xe5
Title
201208120040 → 2012-08-12 00:40 on A858's clock
Posted (UTC)
2012-08-12 04:37:52
Timezone
UTC−4 · title 00:40 against posted 04:37 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
GUIDs
28
Filler GUID seed
new Random(673).Next(9) ✓ verified
Run
Run 22 (seed 528,385,484) (seed)
Draw
72 · predicted N = 28 ✓
Machine boot
2012-07-27 19:02–19:13 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
7 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 50b4419e-3761-29e8-93e2-7344e6743102
  2 89000e71-78c2-285c-9647-e66c9f264b08
  3 5e0f2722-bc23-1032-a8ea-fb37c83236a7
  4 5b2935fb-f7de-1a59-acab-e37123348951
  5 704046ba-fff9-051c-a52e-8b1537d67e72
  6 39a2b247-6c26-6014-bbec-67366383310f
  7 38b84ef5-7e56-4985-be85-eb2c6154096c
  8 dcd69068-19d0-0258-a875-9b52f8b44272
  9 a373bd72-943b-25cd-9d5a-aaf127b71ddc
 10 746076cd-6835-30fe-bc68-86b1c320cab8
 11 e506ec75-b828-1e4a-b4d2-d5634cf6d2fd
 12 0f53e0d3-dc1b-70d0-8a27-62483eda314f
 13 ac041feb-d32a-27f2-ba31-7505b50dbaea
 14 37b6a250-57c4-562a-960f-b9d77e39ce9d
 15 82ce7187-c4b2-00db-ab31-705145bb808f
 16 df9bfaf2-0692-2fed-b558-f8f964f7827f
 17 0899c988-3d1d-6481-b036-338295176e69
 18 9d230b65-50be-22b3-b44d-0e7d4a5ea0a9
 19 3cdf5028-8d2e-8874-954b-978e0cef5f10
 20 fa40d8a1-c37f-8118-95a0-50b89e0741cd
 21 6a20266e-fbe7-2c77-ab1e-484cf8f76d86
 22 4a286955-6625-877c-b579-4d5c7aed47b5
 23 1a607188-5e63-6ad1-bff1-56f2f621d25d
 24 f42e5434-4023-1e3e-a07a-1599d066ba00
 25 258320fc-87d4-5efb-8e38-b0a7000bdde9
 26 5d4a2d5e-410b-39f4-a80c-a7a0ebd0e54e
 27 6650afe7-b2fd-57e3-9064-fa4bac59a7d3
 28 8120b6a1-b754-6f8a-b2d8-e13ba471596d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2211064023172502628828615356. Exactly this sequence comes out of new Random(673).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 72 of Run 22 (seed 528,385,484): new Random(528385484), Next(8,64) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:02–19:13).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs