A858DE45F56D9BC9 archive

201209231313 10cj40

explained decrypted filler

3DES(name+title) ECB, 30 GUIDs, seed 966

Metadata

Post ID
10cj40
Title
201209231313 → 2012-09-23 13:13 on A858's clock
Posted (UTC)
2012-09-23 17:13:15
Timezone
UTC−4 · title 13:13 against posted 17:13 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,936 hex characters · 968 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209231313) = e73d06d54aa30399f33acdac5c14cf47 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
30
Filler GUID seed
new Random(966).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
31 · predicted N = 30 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,936 hex characters = 968 bytes = 121 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209231313 (name+title). Key = MD5(password) = e73d06d54aa30399f33acdac5c14cf47, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 30 GUIDs as hex (shown below).

Decrypted: GUID list

  1 352f60b6-0582-3cd1-8348-0f0aee51c3c8
  2 0c6154b7-3d66-206e-8524-d420acea812e
  3 54c93127-d51a-8771-9d66-6fe1e3668a2c
  4 937aa60c-c1b9-6ba4-9e79-fb908d71d904
  5 d443c0de-7f5f-3e0b-84df-a21db9e6c4d3
  6 8ffd92f9-75b3-6f21-a03a-bc98fed995a6
  7 c602be34-0e66-6b60-83e5-fcf6da834010
  8 18e3acaa-f91f-0cce-b140-121aad2a995c
  9 ef7759a9-55c8-493e-8d90-734140d79790
 10 96159898-d16e-4551-94e6-f3b33dcd44a9
 11 85961194-8939-83a2-8cbe-47efb66e0a3a
 12 d52be711-f619-5c28-b9e9-26a931f8221e
 13 4382973e-e61a-69db-b075-4495b5c0ddd8
 14 db9f6f4d-6ef8-0fec-9cbc-d908c80612dd
 15 01bd4110-6fbf-13c7-b954-c28846fdfab7
 16 b75bd447-eee8-218f-8ef7-b02a833fd709
 17 ab5cd9e8-97c5-851c-80c1-15de25f6c702
 18 cb66dde0-84c8-8248-80b7-7a6e1bfe60af
 19 41317c48-0add-79c9-8bd9-a256a3378409
 20 fb2c86f1-3157-3f5e-b372-1fe42926b112
 21 cce0913d-d44f-15bb-b1b1-5ed88b427063
 22 f5e7480f-b09b-7da7-9676-aa76af97a36c
 23 70af682f-307e-2396-a94a-13f158c358d5
 24 7057b225-eb2c-4628-92cf-333260985803
 25 33be7b4a-99a0-37f7-a621-55fff2a6445e
 26 d834ee2d-c09c-7ad6-9e58-0f8a2b9ee6c3
 27 7d58a41d-4c63-4c0f-bf6f-7e95fb4187ac
 28 5030a55a-2528-283d-bdf7-c84fe79c54e7
 29 1a21a5cd-3911-3ad7-8c78-f44efd2701f8
 30 d9bdb81e-1073-068c-a454-9301ec5401d2

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 328636604485601288731724374230. Exactly this sequence comes out of new Random(966).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 31 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 30; the post has N = 30 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results