A858DE45F56D9BC9 archive

201209232350 10ccgs

explained decrypted filler

3DES(name+title) ECB, 29 GUIDs, seed 503

Metadata

Post ID
10ccgs
Title
201209232350 → 2012-09-23 23:50 on A858's clock
Posted (UTC)
2012-09-23 14:50:15
Timezone
UTC+9 · title 23:50 against posted 14:50 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,872 hex characters · 936 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209232350) = 11d4e4a634417da440c443a527ade932 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
29
Filler GUID seed
new Random(503).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
16 · predicted N = 29 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,872 hex characters = 936 bytes = 117 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209232350 (name+title). Key = MD5(password) = 11d4e4a634417da440c443a527ade932, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 29 GUIDs as hex (shown below).

Decrypted: GUID list

  1 cdae7025-21e2-4fc6-b1c7-5dcbed265a07
  2 90e68583-ac8c-3083-8db6-f103904347a5
  3 8352a5c5-8010-351d-9775-acb8448501f4
  4 3b141257-eece-88d1-9940-8ff533b1ed4b
  5 cefea4ca-fbd3-2e98-863d-0a301d8092dd
  6 32c6332f-e39d-150f-a852-e2b84c9f5f6e
  7 e8ca8bc4-adf7-241e-b7a1-b671297d14de
  8 6e3c0423-8ea2-70bc-bc91-62151c512c83
  9 1d70010d-4e1b-1ef8-b94a-4725175bd817
 10 aa257ed5-33c2-6e63-81dd-d81ba419c7f4
 11 8467c555-0584-7274-9ab2-569a47d6719f
 12 ea4e56b7-2e0d-1514-8ca9-f668a996d416
 13 cd7495bd-c820-37f5-85a2-e280e6c19d3f
 14 f52c21de-e819-11d2-84fb-9a37b7c0ba89
 15 f5ac7578-bc54-06db-8f01-645c3843c1f7
 16 1320453f-d985-19f6-8d22-1c5b715b4314
 17 9b5ae061-8cf8-2f92-ad2a-680679357e68
 18 26a348fa-8f15-79ef-af5e-c7638076fb98
 19 560b3d7b-22bd-20bd-9b99-8c09762c494c
 20 f3e3189a-d368-0db8-bebe-cdfbcc807af2
 21 9c140e75-e6a3-5b10-9562-3bbf80ca87ac
 22 f1afff97-5d12-231f-9286-f7890d78cd8b
 23 949a619e-ff98-0ca0-85de-f398540d0163
 24 08c6e60f-3d95-659c-af16-92b8be826604
 25 340a6221-eec9-82ff-bb51-b8bb7e0f8488
 26 5c4ff50e-0bc8-0547-a6cc-20e8d6ffbb19
 27 c2d7a97a-9d4d-30f3-8969-2f0850477585
 28 e9cfc83b-91dd-32b7-871c-0821c9417bcd
 29 8f876e60-f4d6-4a1d-8f8d-d9061595681c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 43382127167131012720520680334. Exactly this sequence comes out of new Random(503).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 16 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 29; the post has N = 29 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results