A858DE45F56D9BC9 archive

201209231342 10cko8

explained decrypted filler

3DES(name+title) ECB, 37 GUIDs, seed 957

Metadata

Post ID
10cko8
Title
201209231342 → 2012-09-23 13:42 on A858's clock
Posted (UTC)
2012-09-23 17:42:36
Timezone
UTC−4 · title 13:42 against posted 17:42 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,384 hex characters · 1,192 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209231342) = f51821c3c0dc4c7f256e3f1ed71818cf (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
37
Filler GUID seed
new Random(957).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
60 · predicted N = 37 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,384 hex characters = 1,192 bytes = 149 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209231342 (name+title). Key = MD5(password) = f51821c3c0dc4c7f256e3f1ed71818cf, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 37 GUIDs as hex (shown below).

Decrypted: GUID list

  1 2152bed5-d82a-6ade-ba58-f245e7483f2c
  2 7b00c7c2-bc8c-5368-b96b-bc1435d2877e
  3 22dbd708-7e04-61c3-ad59-d1d72d82aad7
  4 c606bcb0-ef70-733d-be66-67948c67d22d
  5 8e93caf3-9ba4-2ade-aa23-6f4a55085db0
  6 dc8080cb-2fce-7b8f-805c-49c4b17a61d4
  7 95d2ba4f-0088-67a5-b0be-6281bf9ffe5c
  8 223c6870-4281-4d58-a2ec-97a217c2229f
  9 349739a7-4d73-3e7a-b26e-6c72b3555cec
 10 d66a5f20-1f30-1702-96e4-8680c259db8b
 11 daa484cb-0eb6-3081-82f1-d3da257ed34d
 12 08d8b4dc-bf22-5dfd-90a1-ecd2b9661bb9
 13 2a14aa53-064a-42b2-98b9-cd0e03292d4e
 14 b4cee3fc-8275-3260-9d16-75e79b67bf19
 15 14294d8e-90ae-73ac-b824-b42f0e2e36b4
 16 986d3945-c8c6-62a9-85f4-1209f66bc545
 17 7239bbc1-1424-1132-aa63-db06200cee76
 18 cdeb066c-fc54-3e3c-a89c-af98dd84dd94
 19 11355d41-92f4-57dd-b13e-5a2feddfd40f
 20 1dc809ef-a812-7f5d-8059-f81accde47e8
 21 99030bb4-38f8-8177-9d73-7375b3c0d120
 22 0bc8e176-de70-541b-a094-5cfb00b66308
 23 e1476581-5247-6bc0-9b71-5f489a831fd9
 24 ff2af0f5-8bf9-33cc-b7ed-33d2a1c21572
 25 4a56c23a-e52a-4e85-9b91-0cac2426e198
 26 a55dbf73-be88-0df5-8700-f95d745ea087
 27 2560384b-f780-6731-aded-b587e2cd9546
 28 a38a8967-c3bc-5afe-872b-f0fb12ff0b3c
 29 d932f9b4-5518-7732-8a55-6b36709d75c5
 30 0b8326e0-c132-7009-ba5b-106cacdf3ec2
 31 41ddabc8-2279-4ccb-b343-1fafc22beaad
 32 db56c98e-97c5-44c4-9488-bb3fb3141ffe
 33 992b2c94-ab06-125b-b695-25cf13f2c572
 34 a3190fa3-264f-8fe2-9bbb-e620dbea30e6
 35 a7d081f2-7ed1-74d7-a87f-23d7d938024b
 36 3926211e-e197-2fe4-bc70-8b0718344f5e
 37 a68cd9fa-7006-64c4-b45b-3d4c3af4b550

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6567276431354376135785634065774418726. Exactly this sequence comes out of new Random(957).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 60 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 37; the post has N = 37 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results