A858DE45F56D9BC9 archive

201208170513 ydb3y

explained decrypted filler

seed 153

Metadata

Post ID
ydb3y
Title
201208170513 → 2012-08-17 05:13 on A858's clock
Posted (UTC)
2012-08-17 09:13:51
Timezone
UTC−4 · title 05:13 against posted 09:13 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,936 hex characters · 968 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208170513) = 4a67ab2000144b32b01093b17d2efc0e (name+title)
GUIDs
30
Filler GUID seed
new Random(153).Next(9) ✓ verified
Run
Run 25 (seed 158,297,437) (seed)
Draw
17 · predicted N = 30 ✓
Machine boot
2012-08-15 10:14–10:24 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
7 · 2
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,936 hex characters = 968 bytes = 121 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208170513 (name+title). Key = MD5(password) = 4a67ab2000144b32b01093b17d2efc0e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 30 GUIDs as hex (shown below).

Decrypted: GUID list

  1 819d7630-565e-5ef1-9511-9c024b5bcbea
  2 8481b843-e2c8-6842-885d-4b7d0ef3d2ca
  3 6c930f79-beb8-6e51-8b1f-1558fbeeba5e
  4 e23eb78e-7ccc-1fad-a2e9-26f79c0cef20
  5 3bca1662-166b-2a7c-b116-43b02d2228f1
  6 74a631d8-1548-2048-a69e-af0a2d236f0b
  7 6df274f6-953c-4d4e-a1e3-6221cca590aa
  8 5b74e493-96ab-1ed3-9ff2-8287c61661d1
  9 c8975963-6328-8583-8cfe-a7a6bd18fecf
 10 04fb53a6-8af0-61b5-88e9-793dce65b332
 11 72cab87f-f7b7-04fd-bc63-a32e317599fb
 12 05e5af71-562d-83fa-8230-3e61b5fba89b
 13 d36a015f-ef0d-7498-b814-424046fd98d5
 14 76d45f76-6980-0ef5-9412-6e375a7e9659
 15 2c889d47-6c20-030b-8b58-518bc2d08b65
 16 0baf827b-4993-596d-8065-f727a33e1cef
 17 1f5ec545-46c2-1a1f-b521-0a17d13291fb
 18 10a7e05d-56a3-7fd3-9735-68c7a7c868b8
 19 ccfbf375-77d9-7c84-a41f-604290c48070
 20 05119c0a-df96-5d76-8cf0-4d67bb327179
 21 4fd9fc5d-1a81-1385-b73f-83d444626571
 22 93730dbc-e0a5-3c65-bc05-54d3e653a915
 23 c5ab373f-eb2d-7bdc-9efa-34d97beb1553
 24 2f565658-ebc2-4aa2-aad0-b0608c1175ae
 25 c211eb8c-7a17-6491-82cc-66fe04885492
 26 ff5f4977-bd0f-8b4c-a62e-1b37bb4ddd06
 27 289553c6-1e7e-41a6-aa06-d0e08fc22987
 28 9a2349ad-3ee1-442c-8476-2d54a739b058
 29 ca034dbd-ea54-720c-9cda-2b04a50ff7cf
 30 f9957873-1145-2187-bc62-d26ab5f9595d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 566122418608700517751374684472. Exactly this sequence comes out of new Random(153).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 17 of Run 25 (seed 158,297,437): new Random(158297437), Next(8,64) per post. The RNG predicts N = 30; the post has N = 30 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:14–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs