A858DE45F56D9BC9 archive

201208281628 yzaom

explained decrypted filler

seed 323

Metadata

Post ID
yzaom
Title
201208281628 → 2012-08-28 16:28 on A858's clock
Posted (UTC)
2012-08-28 20:28:02
Timezone
UTC−4 · title 16:28 against posted 20:28 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208281628) = fcf1b9b2b8711cb05c78d6d2cf9cca72 (name+title)
GUIDs
33
Filler GUID seed
new Random(323).Next(9) ✓ verified
Run
Run 26 (seed 1,159,248,375) (seed)
Draw
1 · predicted N = 33 ✓
Machine boot
2012-08-15 10:21–10:24 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208281628 (name+title). Key = MD5(password) = fcf1b9b2b8711cb05c78d6d2cf9cca72, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 4b6e2ea0-adce-4f0a-b7ce-6a85c9503591
  2 81bff189-f74a-5924-87e3-7b58a7cd4b80
  3 e3c0e1e1-c9c9-4297-85ba-9e05294897bd
  4 409b5f39-f52c-4336-b1a1-c4ebd75c04a7
  5 e72a8b67-65d9-036e-ba64-e227689865d5
  6 37b90b17-5967-7a88-91fe-d4b91cd08906
  7 b84f3f97-791d-5199-868e-b91ee1815f87
  8 0148ec36-074f-4c87-9c06-edfd2697c104
  9 d35475ab-334e-83df-832f-d87a2dc6e7eb
 10 2ef4b4b0-7aa6-37c5-b617-f4ad2965aacc
 11 cfbf1185-2714-2570-83c0-c451b92c00a3
 12 b6ea325c-c68f-551f-a068-13df448bcfbf
 13 e54d629b-1b7d-661c-ac9e-59ec12a270fc
 14 6241a775-0f38-4ce9-8ca8-fc4ee869efb9
 15 5fe44376-0fe6-04c1-b030-93fb9bb1a98b
 16 45ef7100-e420-633a-8fd5-cb25e1f7e0db
 17 587f54a8-e9d2-58da-8ed8-1121fac266ce
 18 f15229ed-2d73-214f-a2fb-f99e8644925b
 19 36aad920-4dd7-3d9b-b838-bc919acd54fb
 20 ee2f4f83-1f2f-3418-a7ed-f040b296ff0e
 21 125ea38d-a55a-6d60-b7ce-d8d53597fc99
 22 e74db4e5-1096-00ac-877f-af3e7c77b4ba
 23 23bf8fa0-6ad3-581c-8de9-130c2c51c940
 24 6572c2f0-066f-7d86-912b-b190d938b531
 25 87b0f495-b90d-358e-a113-b5e3e2fd3d66
 26 ab1a6c3f-bc3f-2f34-8b7f-ea9d455bb8b0
 27 14b3e5a8-e240-5430-b2b0-14ca293636f6
 28 b5431bad-ff23-7d21-b313-a93b892f938c
 29 bc949592-17fc-6802-b7f2-2ce322489916
 30 270bd465-38e1-1b2b-be8b-8a3fcb7a42c6
 31 a8825c2d-126c-3eff-aadb-be5aca99a805
 32 2df3cd48-c325-48cc-adb3-2f6c6eba3e49
 33 c3ccda6f-5333-10ee-9ca4-f1e47ea46031

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 454407548325640652336057325761341. Exactly this sequence comes out of new Random(323).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 1 of Run 26 (seed 1,159,248,375): new Random(1159248375), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:21–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs