A858DE45F56D9BC9 archive

201209231337 10ckew

explained decrypted filler

3DES(name+title) ECB, 28 GUIDs, seed 737

Metadata

Post ID
10ckew
Title
201209231337 → 2012-09-23 13:37 on A858's clock
Posted (UTC)
2012-09-23 17:37:32
Timezone
UTC−4 · title 13:37 against posted 17:37 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209231337) = 5c414a4cfe79190ded41305df0af3d03 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
28
Filler GUID seed
new Random(737).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
55 · predicted N = 28 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209231337 (name+title). Key = MD5(password) = 5c414a4cfe79190ded41305df0af3d03, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 06b78c04-da22-6aa7-94aa-97a8d7615156
  2 3485cf3b-0887-01d3-b282-103bb8983fe7
  3 0c6ab687-660e-8c95-a3be-08ae83abd9ff
  4 b0ed2726-5fd2-708f-ab88-6f21a8daf51e
  5 a3181e43-3a57-8e4f-95a2-3eb68f44e892
  6 78f8e816-342d-5cdf-b3b8-3f50841a3006
  7 a6b069a7-e8b0-14d2-b7e3-a0b651b20a6d
  8 7de92e17-679f-195f-b9bb-a80623b6180c
  9 cdb6be54-53af-1c1a-aa4e-cb1f273b6bf8
 10 6cb0ff30-fc78-0b69-9701-33c838d3946f
 11 f48cb6d9-39e5-2bb1-ab2f-a73be0ad6829
 12 611ceb7d-a6c1-79bd-a377-3f66d40f9277
 13 4f6072be-9fc4-25fc-8778-91d8a9bf2c44
 14 31a3b392-9ad7-838c-af69-2770a1b1ca0f
 15 d90dc3a9-4648-76d8-811b-6242b260aedc
 16 79d317db-7109-268e-adff-aaa627e44ebb
 17 c9470a46-a97f-6795-bbca-65e1a0510a37
 18 f5d80602-7d12-8f1f-a214-2fa916a730a5
 19 70b36795-1e0e-5715-bfc1-8b4d12e421b1
 20 d489e6ec-4513-63c7-849e-b70a64b1f74e
 21 1e9c7948-0e43-6c2f-adae-30af215104b1
 22 6e9acdc4-5d84-51b3-90e9-b8918fa4b92a
 23 264e0780-05d5-4f1f-8a83-e3e83658ab09
 24 2a12a702-cb23-4f96-a8fc-1fba3300362a
 25 2bab7650-a546-8140-beff-44f860c27c26
 26 d29f4b24-1175-48eb-a0b7-253b383d4ef3
 27 91b6a21d-9177-58a5-b355-842685042752
 28 49d44e89-5599-3770-ad6f-45e46ba9685c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6087851110272872685665448453. Exactly this sequence comes out of new Random(737).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 55 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results