A858DE45F56D9BC9 archive

201209041700 zbrqp

explained decrypted filler

seed 108

Metadata

Post ID
zbrqp
Title
201209041700 → 2012-09-04 17:00 on A858's clock
Posted (UTC)
2012-09-04 08:00:33
Timezone
UTC+9 · title 17:00 against posted 08:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,192 hex characters · 1,096 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209041700) = 84795f9be46b0b4cd32337d419cbaa84 (name+title)
GUIDs
34
Filler GUID seed
new Random(108).Next(9) ✓ verified
Run
Run 27 (seed 1,337,299,625) (seed)
Draw
54 · predicted N = 34 ✓
Machine boot
2012-08-15 10:07–10:24 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,192 hex characters = 1,096 bytes = 137 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209041700 (name+title). Key = MD5(password) = 84795f9be46b0b4cd32337d419cbaa84, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 34 GUIDs as hex (shown below).

Decrypted: GUID list

  1 2c0d122c-a005-14e6-8da6-62a24c3fbcdd
  2 f0cf87c0-f8c1-403c-8f36-48fad647fd72
  3 d592951d-683f-2eff-9b1d-4f9c00550167
  4 20d79067-c648-5fe9-b56b-28b2b76bf931
  5 a31c1e53-dbe7-8c36-a744-152a16bd6ccd
  6 fe8dedcd-4b60-86e1-a9e9-8ae26400d366
  7 1aa91a60-6746-2664-8a3d-d9e195607aa9
  8 06e2d1e7-1ef2-5c59-bf1b-6b82fd9f7afc
  9 c401edd8-767a-31c7-86b2-2a9a2cce892f
 10 5235460c-f4da-0447-8632-e7f0370c3af9
 11 f93b3609-02f1-7898-a3c1-c396e3effb64
 12 e15c0f7c-2d9a-790a-a115-2a17411905b4
 13 b2c01b2d-2e12-7636-8b77-34b600b40be3
 14 6291be2a-1d1f-54e5-90ed-7d4f430e0c26
 15 bae8ffff-2cf2-5f8e-b3d3-ee333494a35c
 16 9e3d46a5-ccf0-45b8-997a-ed8d9bd9bec1
 17 16f1314f-bc0e-288c-8417-42e3659cd65d
 18 7d5c4688-ff3d-8206-9691-810e64bec5c4
 19 28c2f2fd-8c92-5cff-bf5a-7468338bbf20
 20 d87d1bc2-08fa-1558-9f61-ece507f3ee6c
 21 f0a9fbf6-cc1a-13f1-8b38-b499fa1a5303
 22 a1f3db50-3137-30dd-b91a-cb435e7881ba
 23 6e167438-97f9-235d-add6-d116614e85bc
 24 ff80bc73-bd80-6595-a669-d58647bfd989
 25 469fccd6-09e5-20b8-8677-04b01a780189
 26 18568206-ff8c-834d-ae2f-7878423f1c0e
 27 d86d9b7b-0cb3-7a00-ae42-83f4f886546a
 28 43b31a19-5351-5eee-bea8-2b61f9107fb5
 29 525b35f9-0d17-33b6-9211-7d0d4930932c
 30 0a99c933-3cad-0294-afda-9e931a2a4db5
 31 41ca591c-59af-0f78-ab2c-4551c65a23db
 32 93f3daa6-2ba6-8526-9943-4d73897f4804
 33 37fdcac1-44b0-646f-97b5-49bbd2420daa
 34 42336b3a-68c0-683b-872f-2a858fcee1c3

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1425882530777554285113262875300866. Exactly this sequence comes out of new Random(108).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 54 of Run 27 (seed 1,337,299,625): new Random(1337299625), Next(8,64) per post. The RNG predicts N = 34; the post has N = 34 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:07–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs