A858DE45F56D9BC9 archive

201209091059 zl0of

explained decrypted filler

seed 887

Metadata

Post ID
zl0of
Title
201209091059 → 2012-09-09 10:59 on A858's clock
Posted (UTC)
2012-09-09 02:00:00
Timezone
UTC+9 · title 10:59 against posted 02:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209091059) = 0292ab94010eda926c606b0a89eec753 (name+title)
GUIDs
33
Filler GUID seed
new Random(887).Next(9) ✓ verified
Run
Run 31 (seed 15,917,281) (seed)
Draw
8 · predicted N = 33 ✓
Machine boot
2012-09-07 23:34–00:34 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
10 · 2
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209091059 (name+title). Key = MD5(password) = 0292ab94010eda926c606b0a89eec753, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ba45f53a-1fd8-1344-a4b5-2e114c0b0010
  2 e6c4b59e-1dd5-0a20-b206-515b48018480
  3 dd640f9c-2d49-6dbf-86d9-ea9edd49b8a7
  4 7bd746ae-fe71-78ce-80e5-bf86a8af0c32
  5 23c07e56-3123-6be2-8d5f-652ec7f8904b
  6 9ac77e5f-2836-6c8b-a21b-557e784b7de3
  7 9f5f8cd5-e5d6-2a02-9c03-24059be22224
  8 9a3d80aa-a379-387a-8f28-a46952b5e905
  9 c90e6610-50f9-6357-b6d5-ea242b7c1790
 10 277f6916-a52c-3c57-b39d-8f7c60236f5d
 11 3dd4cede-111f-696a-8445-baf17fab29db
 12 e8529eb8-a27e-813d-971d-f041f036576f
 13 1656e1a8-b3f8-386f-8e59-4d756e0e9841
 14 1551184a-cf85-8a2f-8c3a-4afee4db081b
 15 aa7ebe68-d886-7be1-85bc-b5307e0a1264
 16 95c271d5-c88c-82e9-b89b-81e856256791
 17 d5a203eb-8a70-63f3-9d00-24a5afd3f036
 18 f365914d-48ff-8ea3-9de8-96c972be62e8
 19 1a555d45-3c25-660b-b50a-b5a252e2f0b2
 20 f69b041f-96c5-625d-b864-e08f1ff50a38
 21 6d8c70ff-cf43-6699-ae4f-29486cf6c460
 22 1052d53e-1461-4770-aeba-97958d148831
 23 33aa62ae-01f5-83ac-88b1-dba4d6446cf6
 24 8b4e2b52-51d1-83c8-8700-b7f0dd1e7ac1
 25 8d9a75e7-999c-5ace-94be-d2561aed54c4
 26 a1838c5e-c57a-01e2-b3bf-5edb4ba682f2
 27 5dd3c811-5247-43e0-b963-87e53b0c5ed1
 28 9613759d-3811-21dd-b15e-e05aca4d31f8
 29 8c63fba2-7f6e-445f-8c4e-cb2e62756798
 30 f8fbfd54-787c-3e9d-9c55-0dc048b2a5d3
 31 e73203bd-d13f-52ca-bda4-35c2be182db1
 32 058ca12a-6023-04e4-b47c-dbfba018e5be
 33 9051d38a-4a7a-8e26-b475-aaa5106e8327

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 106766236368387868666488504243508. Exactly this sequence comes out of new Random(887).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 8 of Run 31 (seed 15,917,281): new Random(15917281), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-07 23:34–00:34).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs