A858DE45F56D9BC9 archive

201209231314 10cj65

explained decrypted filler

3DES(name+title) ECB, 37 GUIDs, seed 590

Metadata

Post ID
10cj65
Title
201209231314 → 2012-09-23 13:14 on A858's clock
Posted (UTC)
2012-09-23 17:14:16
Timezone
UTC−4 · title 13:14 against posted 17:14 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,384 hex characters · 1,192 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209231314) = 978fb4583c3e0bc7682d57ba4dd87a3e (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
37
Filler GUID seed
new Random(590).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
32 · predicted N = 37 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,384 hex characters = 1,192 bytes = 149 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209231314 (name+title). Key = MD5(password) = 978fb4583c3e0bc7682d57ba4dd87a3e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 37 GUIDs as hex (shown below).

Decrypted: GUID list

  1 606ea3fd-c1fc-8d5f-b138-653d6c02dd3c
  2 11c7d3ef-d47d-81db-a20e-b14fca147cbf
  3 e3e32d26-d787-1034-8ea3-ba3e6c2bc2e3
  4 d13039ff-b557-4c58-9c4f-7ea488ffe098
  5 075054fd-ab82-5030-8706-5cc0643ab56e
  6 96fcb7a0-2a79-1e22-ab9e-5b92dd81977d
  7 a26b5129-6b09-2613-830a-38daec0e2422
  8 7d2c8896-a8f1-30d5-b2d3-1a8f69f4afa1
  9 43862382-3e72-8bde-8483-4dd4fefa63a2
 10 b1912e05-b10e-71e3-9247-99145edac1e6
 11 8322eaa2-0a35-88ff-9584-7d56ee368a7c
 12 03033d73-14c5-08b3-a449-0944951be9f0
 13 9f02ac9d-ef9f-27d4-b690-9de7b8142040
 14 c3b54333-79f1-3523-aad4-9caad6c9cee2
 15 7a347dd3-8aa1-811b-b377-af8e84fc248f
 16 771b801e-cf84-4338-bc69-2f02ad86db71
 17 2fe1a1fb-c983-7224-9ec1-20e7a52a9796
 18 954556af-5f1c-7ed4-bd5d-40a1e57bd6ef
 19 a3b40d20-891c-5b9e-bed6-1d458b28947a
 20 bc4c1cc3-d2ac-624b-87e2-eb104e448d2b
 21 01a7381f-066f-11ec-9ea4-a4ebe6ffa440
 22 851c3e2f-8775-5e40-b093-75f5bb61da50
 23 e9c065fb-38f2-6d8c-955c-b2da848e95bc
 24 13187d7c-5c0f-1eb7-a112-8553fb37ddf3
 25 6c4b05cc-4bd1-407b-a4ab-a479f93baa4d
 26 61f53898-50da-0ac5-bf23-104d6158afc5
 27 a1c73f43-18fd-1fdd-b638-66cce297886c
 28 bbe4d99f-5284-29fa-b8e8-edc6a9b4dfe4
 29 23da77c7-affe-4b8d-bb86-b1342fe07b15
 30 f2daaae3-2b7d-2f9a-aaca-478dc3aa1f2a
 31 ca2be61b-5fd9-0fb0-bd46-8b5bb45b8dec
 32 60237f40-65fa-71e9-9595-fd3afd7cc3a2
 33 ea9c2e6a-861b-4309-afca-5c53514ede18
 34 c38bdcef-52ae-7424-8234-13a14fe2fdb8
 35 beb61e87-a528-560c-b7a3-d4321492b1ca
 36 c693f768-286d-20ce-b1a9-dcfdd12369de
 37 f01a2151-6e38-6752-bb5b-78c8ac2ee29a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8814512387802384775615614012420747526. Exactly this sequence comes out of new Random(590).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 32 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 37; the post has N = 37 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results