A858DE45F56D9BC9 archive

201208170543 ydbwj

explained decrypted filler

seed 272

Metadata

Post ID
ydbwj
Title
201208170543 → 2012-08-17 05:43 on A858's clock
Posted (UTC)
2012-08-17 09:43:53
Timezone
UTC−4 · title 05:43 against posted 09:43 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,192 hex characters · 1,096 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208170543) = b3309213bfc91c6d0d8e1f664b4b5e2c (name+title)
GUIDs
34
Filler GUID seed
new Random(272).Next(9) ✓ verified
Run
Run 25 (seed 158,297,437) (seed)
Draw
20 · predicted N = 34 ✓
Machine boot
2012-08-15 10:14–10:24 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
8 · 10
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,192 hex characters = 1,096 bytes = 137 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208170543 (name+title). Key = MD5(password) = b3309213bfc91c6d0d8e1f664b4b5e2c, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 34 GUIDs as hex (shown below).

Decrypted: GUID list

  1 037c55cc-ed91-7b7c-8feb-d1af0e345b25
  2 169fd1b2-7a1a-55c9-a104-6f9355744621
  3 0b96c90a-a8b1-885f-91ac-172b016c0c20
  4 2cb85811-71e3-5461-9786-9720323772d1
  5 dbdc6431-0434-0d41-92e6-2992bcf78214
  6 85b53620-3d50-27b9-a57b-d06d9b910420
  7 822e9cff-2c5f-628d-a62f-dc6e8649fcfe
  8 c49f199c-7941-894e-8dd6-ff72ddf0bab0
  9 ef76dc74-8d05-5ec1-93b0-9436ed90eff6
 10 48a98bd1-6d10-58e8-a0bc-858449741977
 11 77c1a1d8-9d65-6db5-9223-f93dece9ec0f
 12 8edb0b9e-a861-78ae-aa71-e2a6417987a0
 13 a2500883-6aa2-55d1-a878-bf67c24fdeb4
 14 bd1edec7-82a5-80e6-b848-e1d406da18c8
 15 cba7fe40-c688-301a-a3a1-f8bb3b257a0b
 16 c23cda40-707b-8249-bdc7-a413a17ba2c3
 17 4d8d19f2-2be7-14d3-9028-187a7adac718
 18 3915d5c2-3648-5bef-a2e4-cac7887ef33b
 19 10211b2a-41d0-0230-bc48-2f3848d60bb1
 20 46a63fb8-440f-56cc-9749-d0e8db69cf3c
 21 1ff2a480-2cd8-8711-8751-df886144a9f1
 22 4fd4c01a-c157-503d-9760-7a5b421afc11
 23 d2e46f9f-f3cf-8b47-b902-a6e9ac3d6612
 24 0c0fc62d-73c0-073b-a22f-661df58eab4a
 25 5d637998-bf65-3452-ab04-7ea626040cc6
 26 13a6560e-8274-487c-8f2c-84f7ec34cb72
 27 f890c585-e9af-7755-99c9-92862be7ef7d
 28 caf9f167-f26b-1beb-a741-a7a79eb97995
 29 e3840c70-cf2d-6d09-80ca-8c2b015c2eb0
 30 c55407c3-eb31-187b-b579-246c0ee5e2df
 31 03e6004c-b9ce-5aea-90f3-e493e650b705
 32 7007a057-9701-05dd-b8c6-281e3eb85594
 33 385f6f03-3815-6d84-93da-e49b4897387d
 34 a89f4c8f-b001-73ca-9706-61d7b1ac38f2

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7585026855675838150585803471615067. Exactly this sequence comes out of new Random(272).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 20 of Run 25 (seed 158,297,437): new Random(158297437), Next(8,64) per post. The RNG predicts N = 34; the post has N = 34 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:14–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs