A858DE45F56D9BC9 archive

201209041430 zbm9d

explained decrypted filler

seed 220

Metadata

Post ID
zbm9d
Title
201209041430 → 2012-09-04 14:30 on A858's clock
Posted (UTC)
2012-09-04 05:30:26
Timezone
UTC+9 · title 14:30 against posted 05:30 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209041430) = 377ae2de60268332977648e9d713f5a3 (name+title)
GUIDs
40
Filler GUID seed
new Random(220).Next(9) ✓ verified
Run
Run 27 (seed 1,337,299,625) (seed)
Draw
49 · predicted N = 40 ✓
Machine boot
2012-08-15 10:07–10:24 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209041430 (name+title). Key = MD5(password) = 377ae2de60268332977648e9d713f5a3, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 79377977-73d4-5a53-a317-62adccf46426
  2 a57dda52-b337-3375-bcee-db299f515f03
  3 e9ea1341-06b1-4f9a-9ddd-037647168928
  4 e7f9fded-c3a6-4b59-8e3e-86b4d16882b7
  5 39ba17ac-17af-4f1b-9898-ac2ee667bb85
  6 3ce494ef-ec64-73c6-8236-8164c4c3fa16
  7 49919ddc-c7fb-4cdb-91cb-392f54598f0f
  8 8e900b76-7512-792e-a267-e27250c5c758
  9 e17e4955-50ef-10fc-9d06-7f7efc2766bc
 10 fc00c5ae-7472-3468-a81a-2a4a0d3d84f8
 11 5e18bc4b-4ad6-3ab9-8e6a-8c82a2011b56
 12 a0c1b8db-a095-2c63-96a0-7070faaac48c
 13 ddb87bdc-e7ac-7ac9-9b3e-b532e5e38b2c
 14 d2c1e405-756d-8cb7-9c7d-716baee2068b
 15 7296eb1f-2882-8fdb-aad0-70a5818beb36
 16 972bd8e5-af8b-3873-8f0f-d8b7a92e6b9c
 17 91e638a5-f295-38ca-ae42-28a7e3fff7eb
 18 f652b7b2-18f6-3a94-aa4b-35c86944122d
 19 a36381c8-8a90-5ae0-bebe-71ed1676be59
 20 52ce05f4-4952-4234-97cf-5d85a7545dea
 21 57d8b233-fe99-01da-b792-532b4f2a6d72
 22 adf06376-a224-7684-9e03-7fa582eb712d
 23 7557e594-2eb2-18d1-ba8b-ada2988b4893
 24 62b92741-53cb-7739-bbfd-5d18be831786
 25 53eba359-2925-2b58-90a4-a97ba59ead2d
 26 556304c6-2b1e-0257-bb31-e98a1cbb5c5c
 27 0f1aab20-1e31-0666-8747-a477610e5514
 28 a85d1243-240c-007c-8990-c77459a75320
 29 1c22d560-be81-2140-bd37-d1a1b871381e
 30 cb240070-a9ed-275d-9a16-caf29244a2ab
 31 1d0f262a-bd17-37ec-bb4c-89837d433e56
 32 4ac8090f-7b6a-39a4-98ed-8e5d8f3c7228
 33 29c365ae-a2a0-61dd-90fd-33df8222387c
 34 1c9a663b-71cb-485c-8442-b0d1e6eed304
 35 e237b6a2-a82c-4332-8bd7-57c4c2535bd0
 36 b76fe692-90d9-2afb-a2e2-3f79bdd10e42
 37 9c80c132-dee8-2237-a9f3-0148a70fd57e
 38 8a173a96-dff1-23fe-b97f-a8f92673f100
 39 784f8e5d-1bfa-0144-87e6-788b10f3ece0
 40 da9cce05-7f7d-7caa-a7ef-2b3468205e7f

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5344474713327883335407172000223364422207. Exactly this sequence comes out of new Random(220).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 49 of Run 27 (seed 1,337,299,625): new Random(1337299625), Next(8,64) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:07–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs