A858DE45F56D9BC9 archive

201209231345 10cku2

explained decrypted filler

3DES(name+title) ECB, 35 GUIDs, seed 218

Metadata

Post ID
10cku2
Title
201209231345 → 2012-09-23 13:45 on A858's clock
Posted (UTC)
2012-09-23 17:45:38
Timezone
UTC−4 · title 13:45 against posted 17:45 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,256 hex characters · 1,128 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209231345) = d46f7106540aa08bd7b346202857829a (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
35
Filler GUID seed
new Random(218).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
63 · predicted N = 35 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,256 hex characters = 1,128 bytes = 141 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209231345 (name+title). Key = MD5(password) = d46f7106540aa08bd7b346202857829a, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 35 GUIDs as hex (shown below).

Decrypted: GUID list

  1 f20f6cf6-2971-56f0-b1fa-0aa3d64764a5
  2 af1f1768-fe16-7445-9577-dec356f37571
  3 c76a11bb-b6c1-1722-b349-fed7033de53b
  4 d5ab0169-9ab8-0a34-a456-58b5bb7a9cd7
  5 5278ffa0-e271-5f97-8169-71ebd3e61b0f
  6 6675059c-b469-0aef-96d8-7a289fc494fc
  7 fef4c650-6206-5a82-bf3d-8a44461dc5fe
  8 c514e966-1503-7daf-a890-5cc9879bdb9d
  9 3fcd1988-1446-84f3-bcdf-45ad3bd0bf2c
 10 26a5a7a9-a665-5c8d-aa75-728569387bbf
 11 b61e0e89-336b-8f8a-bb53-05a59e207e6c
 12 0976697d-2135-5037-b6b1-38d43a402934
 13 075c2923-4268-4796-9d39-d3a9e4004f34
 14 3ee79c5b-6cb8-7338-97b3-0c85ea7da544
 15 c275ba14-8842-5c0a-a7d5-31b29d396de7
 16 ad8db7de-2729-1139-b01e-728d7b8a18f3
 17 d0607406-f243-46bd-9062-665ab84d8d9e
 18 0a99bafc-f408-13a2-b296-e438eb4eb66c
 19 c39b3824-616f-5a1e-93d1-124e0baf4a83
 20 01d8ea14-2f37-61e0-a372-5d372c3ea9b0
 21 449db4da-ff7c-7cf1-862c-bd98e7ea394d
 22 20778706-07ca-2622-8227-73e3a7f35d95
 23 32bd548c-2003-7717-a73d-125000b4f2a7
 24 48b351ae-8ba0-1fa7-a854-228b34dd7b2c
 25 98fec9b4-b07c-0bad-9b5d-0bc51ab1645b
 26 afa8934a-5f2a-6926-a5e2-a107d54dfb6c
 27 8c929878-04c6-3e32-9027-03ade8afa293
 28 5771f327-0bee-6785-b836-bc30f71c9c66
 29 77f843a0-6ca4-6929-a066-309a6abb9383
 30 0ca823a0-ef09-5dcb-b8c8-b9c4d03e006c
 31 fda2b309-c503-6011-8629-978e624a2d72
 32 392f7cfa-31f3-7176-a149-1e70c6baf3fd
 33 7b0693db-15cc-8366-ad06-c2c86f36c5b6
 34 7abcdd7c-5cb3-4d6e-b3e5-c5f3747bebcf
 35 1f9fddb2-d004-6d8e-8e52-1bdb9e2169ac

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 57105057858547514156727106366567846. Exactly this sequence comes out of new Random(218).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 63 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 35; the post has N = 35 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results