A858DE45F56D9BC9 archive

201209231310 10cixc

explained decrypted filler

3DES(name+title) ECB, 40 GUIDs, seed 971

Metadata

Post ID
10cixc
Title
201209231310 → 2012-09-23 13:10 on A858's clock
Posted (UTC)
2012-09-23 17:10:13
Timezone
UTC−4 · title 13:10 against posted 17:10 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209231310) = 73faedca66aa4c3465625617e5133d5b (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
40
Filler GUID seed
new Random(971).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
28 · predicted N = 40 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209231310 (name+title). Key = MD5(password) = 73faedca66aa4c3465625617e5133d5b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0e449b18-a5c6-0874-b1a4-b72797d45499
  2 5d08dd99-5608-64fa-b56d-eb596e0784bd
  3 8604deb5-569a-46e7-ab6b-05bc7ce2df88
  4 a92309c0-0b73-7ce3-874e-54465dd6e7a9
  5 0e89ae54-76cd-5d22-9125-7fa6aba89389
  6 5c99bc61-f689-198e-81cf-8b6612e6b4d5
  7 a4888b6c-6c11-8459-bea5-51f9c95a3fcf
  8 54a1767c-aaca-5712-9e42-d760f3a1905b
  9 7fc59d4f-bfe8-042d-92b4-fa78487af8f9
 10 a4d9606a-a60d-2df3-a693-dd300f36b86b
 11 dba4197a-83a8-546a-b245-8f566aa8abfd
 12 6d950a74-6dfb-4a48-906b-83784c299d47
 13 2a907888-e932-1fa6-a825-30482f3c54eb
 14 c91bf847-0434-5741-8bc7-3fbc6accced0
 15 efe0547a-f57a-5fcb-a4d1-0e0fc272e063
 16 3ff24244-2563-337e-9add-d2ed12bb1202
 17 af83d3e7-5c0d-042c-a123-ff715dd01bdd
 18 bd20b2d8-95d2-039f-bf39-c507a1983c49
 19 a43ce171-401d-81a9-b7fa-e289fd521ef5
 20 47a68e65-d0c2-2cc7-be12-06cff403284e
 21 b64462cb-3a07-7cb3-a7d6-761b4d494bba
 22 f43bbf4f-6a35-0012-aa3c-e5cd24575b71
 23 04335df7-a1b5-04d6-841f-71f077ffc1e0
 24 6ff6a606-bc8c-21f7-9b7c-c0ec5953537f
 25 0d815e3c-c338-7ae5-842f-95ee66d2c126
 26 922bb7eb-2dd8-0bc8-b35d-4460589d4922
 27 710a6aa4-ebc8-678a-a1f1-03c1335f9633
 28 26a9f1c7-8617-270f-9c0b-a53a38b1ae71
 29 ada29ef6-632b-6f87-abd4-85cb4547cccc
 30 0ac082e0-2e2b-011d-8ce4-6dc4e4565ea6
 31 69d985fb-e208-52b2-9df0-6ebb1dc44fb7
 32 54969651-fd4c-15e5-8782-a56f22fd9627
 33 caba0e94-c15e-66f2-9d93-b2d533cd6f54
 34 5c1003e9-c549-271e-aab8-71ad2555ddd6
 35 12961160-8c69-669a-a93f-25c7c3093fd1
 36 6f673d3f-ca91-7826-b5cc-a58142cea096
 37 a868ca3d-b8d6-3d3f-97e3-35516b9df061
 38 36e73038-8bf8-1a5d-821b-5e8475f60446
 39 1199515a-39b3-5d33-86f5-0311c18475a6
 40 b94b8f4c-c301-2a23-9fc2-f95518bdb027

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 0647518502541553008270027062605162673152. Exactly this sequence comes out of new Random(971).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 28 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results