A858DE45F56D9BC9 archive

201208170403 yd950

explained decrypted filler

seed 37

Metadata

Post ID
yd950
Title
201208170403 → 2012-08-17 04:03 on A858's clock
Posted (UTC)
2012-08-17 08:03:32
Timezone
UTC−4 · title 04:03 against posted 08:03 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,704 hex characters · 1,352 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208170403) = 08d82f57d10d8406ad9f5a9d6af29d78 (name+title)
GUIDs
42
Filler GUID seed
new Random(37).Next(9) ✓ verified
Run
Run 25 (seed 158,297,437) (seed)
Draw
10 · predicted N = 42 ✓
Machine boot
2012-08-15 10:14–10:24 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 1
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,704 hex characters = 1,352 bytes = 169 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208170403 (name+title). Key = MD5(password) = 08d82f57d10d8406ad9f5a9d6af29d78, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 42 GUIDs as hex (shown below).

Decrypted: GUID list

  1 79d27b12-e6f9-0bef-9ec5-96033345d0aa
  2 825bb601-7d07-60bc-9da2-685fb7fec3d8
  3 f7616f0a-ca6a-5349-937e-7c86d72f6c94
  4 f2006aeb-f893-4ba6-b45f-8f012ef43382
  5 19ae9064-afa7-870c-9c78-90f2e30a3826
  6 d1a66ef8-63d2-8d1d-9340-5b1933ca0200
  7 7f601027-b17b-4b6f-994d-24c3981ab9c6
  8 d6d5cd5b-13bd-0c05-934e-24e28ede9a71
  9 03350b85-79ee-47f2-9a7b-28e746841266
 10 30e046fc-cf61-8dd2-b763-4959d2daaa8f
 11 4c024e83-1f06-44f1-abcb-e584bf31e489
 12 36ff97c7-02ec-3bbc-9357-2ffbecd628bd
 13 d1ecc475-c467-0337-9799-2c3d7232c4b5
 14 cd418f7d-de5a-616d-8683-8842e81e7763
 15 2d01fa26-944a-7095-aea6-e15c1a1aa65c
 16 b1608963-9c39-1ab0-8289-3814a0a83f27
 17 6f8bfaf6-7fd6-36bf-ac46-94eafca34070
 18 ac8e0f53-4dd5-85e7-9584-9057734e6cb9
 19 3c11f3aa-6c63-6dd7-9197-d7d1454be333
 20 cc079596-eeb8-5440-9ad7-9e3b01bbfacf
 21 b47e8799-2c13-63a9-b122-b42d2a04b99b
 22 6da75bdb-b009-84c3-af8f-6cf7dd48f3fb
 23 d48acfd5-8c5f-2a65-a064-5b4690c47b7e
 24 88fb4597-5b0b-8926-a0c7-afa591097194
 25 9fbfdefa-9ac3-21e3-a380-6bc8111501a5
 26 4665922b-09fe-2b24-b6fc-cf6836abffcf
 27 40765f83-4db1-6661-88d1-30c9e7e539f7
 28 19732992-b350-5099-a439-98ccfbfb1b17
 29 447b5065-329d-6c1c-a787-f343b42c6a53
 30 46f798ff-0533-7309-a98c-8eb8b73c98ba
 31 0b3e4c45-7ca8-7e66-915b-f284dd9561bb
 32 24e70064-3211-12ae-b97a-097bc02a43ec
 33 2aa71fbd-744d-1d8d-950f-85f6d666e810
 34 ba41b2df-1092-8f50-a0e2-ee3242cd57c3
 35 e87de372-2cae-59bf-ad1a-ed70afe7a4ad
 36 785897a4-7c97-34fc-a8b2-0dcefe92dc0d
 37 a40ea2cc-9cac-6c4f-9ee3-2a2b5c094611
 38 31ac7182-ba9b-5764-a4de-3afb3845a184
 39 261acc68-2ee6-6f78-b4ed-96ad42546b99
 40 51e995f6-5e60-884d-b3a5-2fa235855b87
 41 57434832-8236-86e1-b72e-f8eb42af61f5
 42 b759672c-d9b0-801e-8183-4da5e697d1d9

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 065488404843067138656828226567711853656888. Exactly this sequence comes out of new Random(37).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 10 of Run 25 (seed 158,297,437): new Random(158297437), Next(8,64) per post. The RNG predicts N = 42; the post has N = 42 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:14–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs