A858DE45F56D9BC9 archive

201209231336 10ckd0

explained decrypted filler

3DES(name+title) ECB, 27 GUIDs, seed 114

Metadata

Post ID
10ckd0
Title
201209231336 → 2012-09-23 13:36 on A858's clock
Posted (UTC)
2012-09-23 17:36:31
Timezone
UTC−4 · title 13:36 against posted 17:36 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,744 hex characters · 872 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209231336) = 6ee399d61530ea249b1c0e3fa2b58255 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
27
Filler GUID seed
new Random(114).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
54 · predicted N = 27 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,744 hex characters = 872 bytes = 109 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209231336 (name+title). Key = MD5(password) = 6ee399d61530ea249b1c0e3fa2b58255, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 27 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0fc0d587-228e-27ed-acc4-22362c841ac8
  2 fd871b45-4bbc-2389-929d-9e692245c8da
  3 1d28bab2-0f84-494e-955b-efdc0fec095c
  4 7b6cecec-f009-88eb-a264-ed82b23773c7
  5 295c1d79-8078-6f3c-97c5-79629b1970f1
  6 9e049d58-7af2-10e2-a275-53a291e0212f
  7 7b7bf1b8-a764-8a14-a8d7-22242c5a29c0
  8 9a6554a0-0cc0-5a59-91c6-4fbdc8bc0252
  9 f294e7b4-3633-00b1-aac7-1635b20cbba6
 10 a71faa52-3506-2333-ab63-8944c2cabc50
 11 1f77b341-e0af-2786-aecf-53dad6e9ffc4
 12 3c05f7c4-ee50-4364-b21c-c8e5d84a1c7f
 13 b33aec2e-9795-03fa-8afa-993f2a9899a6
 14 8eec2e43-3369-76aa-9888-63d8a50e9be7
 15 febdc9d2-f928-74b6-9112-59d75ec21f8e
 16 785a7dbd-63a2-2d44-80ed-465051ac2696
 17 d8bf7c33-c17d-782a-9799-06dc96c4914f
 18 4fff6444-fd6a-6333-abda-fc1b239476ab
 19 535ccedd-abf5-6280-9d27-39538a164780
 20 d213568e-59b7-4323-8ffd-3a64cd816339
 21 f9545208-14f6-82c0-aee0-def3e7ab44cf
 22 668a8c6d-bde5-7498-9053-3719b1363f6d
 23 1ea68124-ac49-2c4d-9349-44f5050adc19
 24 372991d5-a374-72b6-b51b-d0dfedddce4a
 25 13df3563-619f-7411-b552-dc46b9be3c02
 26 67edf64d-33ae-788c-baaf-56cb627fe9d3
 27 5c716a08-eb0e-8c29-99d9-ff9d9e99482b

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 224861850224077276648727778. Exactly this sequence comes out of new Random(114).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 54 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 27; the post has N = 27 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results