A858DE45F56D9BC9 archive

201209080500 zjss9

explained decrypted filler

seed 325

Metadata

Post ID
zjss9
Title
201209080500 → 2012-09-08 05:00 on A858's clock
Posted (UTC)
2012-09-08 09:00:03
Timezone
UTC−4 · title 05:00 against posted 09:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,640 hex characters · 1,320 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209080500) = 833d1dc82b18e09cd681faf3d994eef5 (name+title)
GUIDs
41
Filler GUID seed
new Random(325).Next(9) ✓ verified
Run
Run 31 (seed 15,917,281) (seed)
Draw
4 · predicted N = 41 ✓
Machine boot
2012-09-07 23:34–00:34 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,640 hex characters = 1,320 bytes = 165 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209080500 (name+title). Key = MD5(password) = 833d1dc82b18e09cd681faf3d994eef5, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 41 GUIDs as hex (shown below).

Decrypted: GUID list

  1 be42485c-4074-4add-be8f-a0756386b00a
  2 be5241ad-7451-1557-a418-004f955bd09e
  3 1d4083eb-3c21-85a7-b256-82973f4f6b05
  4 98720755-e5ab-8c57-a3ac-0bd094f205cd
  5 28fe1da6-8337-8aac-89bf-e84ed0d405b9
  6 c7627b65-2ed5-5427-9de3-ddfd6aa5141a
  7 796144fc-1d31-45b4-b037-f5993ddaa603
  8 0462bd9e-2169-4892-b9b3-3aa45075d4fd
  9 2de14b31-74c8-17de-b8c9-c5432011d16a
 10 15580428-9e95-1e80-8984-cb86cb0b0b17
 11 d567706c-f9cf-6c4a-9cd5-112382215843
 12 c2cd09db-6e65-1a7f-82f3-f3c3320ab175
 13 d9728ccd-254e-08da-8e4a-41fa48bf07a8
 14 6dfb94ca-4044-4f26-b0fc-0d4e9b31e393
 15 7d08e940-d9f4-4a4a-8b1e-1f212a51f7a5
 16 44efa643-da8d-8bd7-bbd2-1334feb5cc72
 17 f1596832-a258-41bb-83d4-668bfcbb32f8
 18 345ece3f-265c-4891-9b2d-92a56448994f
 19 a9d9b2b9-8093-4c84-b244-ca58c340298d
 20 61ec7a00-364e-1ccc-967e-3467755ec63d
 21 f05eda3c-7747-899e-8668-673510b1dbc1
 22 bb98aded-dfde-57ee-84cd-65351e06b5e1
 23 d9e561fc-6570-814f-a218-0129ae10f213
 24 11238a1f-7cdf-5c14-8587-e7c004c976a8
 25 b29a28f0-4dd9-4b8b-a664-61e6e827118a
 26 49f21f0c-5af6-5a32-9018-891cdfd93e7c
 27 c6149b7e-2da2-37e8-b722-c6e5a6ad6611
 28 9ede0869-ff0d-0cad-a029-de28752d8830
 29 e74a6f4e-ab40-2fec-ae97-b63a879082f2
 30 2c9115ac-153e-754a-b288-7aafff7134a8
 31 b00de665-7389-1f89-9f93-01694ef4b2be
 32 6e9fafd6-4682-070b-99da-63351364115a
 33 3b1ea5f4-fd73-84a4-9a56-2a18aa31b73c
 34 da2f8b18-4231-10ac-9b8f-758615a440e3
 35 b9a3ef58-ca4a-1ef2-b1f8-a8007ce9ed2f
 36 66c30a7f-dc54-789b-8004-5eeceed3dbb5
 37 17b5ce7a-83f8-2616-871d-fa219534b904
 38 0251de07-da00-74ea-93ec-6f627a3f9e6c
 39 2703e1ab-db51-0b57-b99b-3ad1deb75a38
 40 9f8ef1eb-6fea-4c34-b0dc-204df5dd436f
 41 b2a205e3-8eb9-0ae9-aa61-17437dfb409a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 41888544116104484441858545302710811727040. Exactly this sequence comes out of new Random(325).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 4 of Run 31 (seed 15,917,281): new Random(15917281), Next(8,64) per post. The RNG predicts N = 41; the post has N = 41 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-07 23:34–00:34).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs