A858DE45F56D9BC9 archive

201209231324 10cjp5

explained decrypted filler

3DES(name+title) ECB, 36 GUIDs, seed 554

Metadata

Post ID
10cjp5
Title
201209231324 → 2012-09-23 13:24 on A858's clock
Posted (UTC)
2012-09-23 17:24:24
Timezone
UTC−4 · title 13:24 against posted 17:24 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209231324) = c38f01edef1b595faf75caec417fcb75 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
36
Filler GUID seed
new Random(554).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
42 · predicted N = 36 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209231324 (name+title). Key = MD5(password) = c38f01edef1b595faf75caec417fcb75, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a3963116-b667-12f0-9b54-0ed26aa83f01
  2 9e8f7a9c-bf9e-3cba-89ed-9161c04b0ea0
  3 487f947e-7d3c-07ba-bc79-5ea525d0b50a
  4 44ded66b-1cfe-720f-a9a2-3dcf5e91a29f
  5 f0da6a26-f9f2-2c24-a117-97d4bedcef62
  6 d189c38c-0c4b-6993-8881-e16920329612
  7 117ba30e-5251-183c-b880-0d685df6b976
  8 fd0bed28-10bd-3f38-81a2-d797fc0171e7
  9 f317a52a-3cc4-442e-9646-25cadd81242d
 10 02dc54a8-af81-55e0-b8f0-52624f795ed2
 11 9d7233cc-72be-3d25-b4b4-bbb6a9f31e1d
 12 f3f3c1b3-d0fb-894c-b345-5db07464c9ab
 13 88111a5d-5552-40df-bb90-80390cf91bbc
 14 d4360e62-b1ab-6445-b86c-8979238c0e7c
 15 10b6130d-991e-6e1d-9281-b1f907413263
 16 2b93aceb-6016-0ec0-b201-8279730bef39
 17 397cd95f-c62b-6b2a-8ac1-8670eddd5b97
 18 9202f6dc-9dfc-4b3c-8cbd-270d70bdf06e
 19 1d153113-2436-6df3-9517-ea6d9cddbf4a
 20 880ba5a3-6cfe-7a9d-b439-c11c69a7c7f0
 21 f4055393-e4e9-3921-9b0a-4ddd70500d88
 22 6ffb977e-2288-6fe4-971b-32b5c24963dd
 23 2cc0c0c6-0287-50c0-884b-4c78fbbb9887
 24 7051322f-646d-5708-b0db-a095d5f0f381
 25 59c0ddf1-9892-84e7-84cb-bf357402c09d
 26 f7333a54-62a8-7e00-95c1-31a876e4ee85
 27 982519a1-64c7-246b-b361-4cf5e1e900fa
 28 3de76818-322c-8fa6-bd6d-f446662fcf52
 29 1ccb1faa-283e-516e-acc6-45f7f80c12f5
 30 2fd3ced2-4f7c-270e-b620-1e849f94a535
 31 31fa329c-4498-60a5-b7b4-d0a86ec57c79
 32 20ad6612-5494-3b13-a57d-2ef993dd99d8
 33 e9fc7cf1-9ad6-0546-bbc7-e3644a834b29
 34 27a28872-ed59-7939-a6c4-1d59605df2c4
 35 b94d624e-5368-0033-9a4a-fa7a1552d984
 36 755de090-dd91-63df-9e2c-642025ae44cf

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 130726134538466064673655872852630706. Exactly this sequence comes out of new Random(554).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 42 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results