A858DE45F56D9BC9 archive

201209231830 10c4lm

explained decrypted filler

3DES(name+title) ECB, 33 GUIDs, seed 21

Metadata

Post ID
10c4lm
Title
201209231830 → 2012-09-23 18:30 on A858's clock
Posted (UTC)
2012-09-23 09:30:00
Timezone
UTC+9 · title 18:30 against posted 09:30 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209231830) = 23c543fb1a41a126fad780712fcd01ad (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
33
Filler GUID seed
new Random(21).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
0 · predicted N = 33 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209231830 (name+title). Key = MD5(password) = 23c543fb1a41a126fad780712fcd01ad, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 6550d071-d064-6cc8-9452-7d15d3befd3d
  2 56b39c50-440a-89c0-b80a-05db773d2c83
  3 6611da49-75c6-427d-867f-912f13bb6bb2
  4 9838943b-c6f0-09c3-8f7b-47df7ce50390
  5 2ed492e2-1cff-635e-bf73-81d35e88f496
  6 8df47043-2c53-80ca-9666-a5e63d8e14bb
  7 9115d7d2-27f7-2b90-87a3-6229f47c2e89
  8 5f738630-e460-8011-9033-d67e2b965f2c
  9 b249640a-c078-5042-821d-5b99be4b3c2c
 10 f9266b05-493b-0a41-85f2-9c657af4a6d0
 11 8f1bc368-7721-6f45-879d-311a5ea84e21
 12 66879904-0747-7b5f-bd62-b628661c358d
 13 b8a27432-8be6-056e-add1-2833540a7bc7
 14 120d946e-0848-3990-969b-7cc1f0dcaa75
 15 d0ef0b7e-8955-65e3-ab94-92ceda91c5a4
 16 d1058b4a-30d2-1f06-87f5-cbf3dcb3d61a
 17 87572048-c68c-62a3-a5cf-176c91b84986
 18 114f650f-05ab-07e9-a348-0dbb52da6aa1
 19 7113d252-51cb-2bfc-9860-ed14953faebb
 20 616da363-e371-4653-b76c-8368e35614f2
 21 d8cdcb86-2bb0-558e-8eef-ec0011dee010
 22 3e86ba67-cf1d-0f05-ae25-3b0be12e80c9
 23 8476fbf9-d763-4e27-914a-62ed76d32810
 24 8102106d-ba86-3046-9adb-0eb17f4d87fd
 25 6e50674e-c7cd-623a-804c-780d9c6ba25c
 26 2beded19-8a0b-03fe-8da7-d1f2c272dba0
 27 2c514163-edb3-80ac-a515-c2b4782e12b2
 28 eb9d808f-079b-6b09-8506-5995520a88b8
 29 dd28d51e-3d42-3958-bd44-db317617ca87
 30 9f5db614-5456-8eb5-8229-b624ca050013
 31 25ed5949-8b0a-827a-93b0-c7b919d5a7c3
 32 c9a76675-eb12-8bd4-8b56-f4bf95a93d04
 33 032412de-1f00-6385-8749-bc9b5ae72ab4

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 684068285067036160245043608638886. Exactly this sequence comes out of new Random(21).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 0 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results