A858DE45F56D9BC9 archive

201209231417 10cmlj

explained decrypted filler

3DES(name+title) ECB, 34 GUIDs, seed 979

Metadata

Post ID
10cmlj
Title
201209231417 → 2012-09-23 14:17 on A858's clock
Posted (UTC)
2012-09-23 18:17:59
Timezone
UTC−4 · title 14:17 against posted 18:17 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,192 hex characters · 1,096 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209231417) = 5c4bdbb5ae80bb240a60c06ab02c1fd2 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
34
Filler GUID seed
new Random(979).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
95 · predicted N = 34 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,192 hex characters = 1,096 bytes = 137 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209231417 (name+title). Key = MD5(password) = 5c4bdbb5ae80bb240a60c06ab02c1fd2, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 34 GUIDs as hex (shown below).

Decrypted: GUID list

  1 cdd57db8-246d-189d-806f-fa67606049d3
  2 457c57e8-dfe6-08c2-9011-2a9c4cefc582
  3 9db29ead-06eb-0bda-a510-f648858a36cd
  4 da0182c7-0e1d-4caa-a895-e02046ea4aca
  5 cdd247a1-86c5-113b-97f6-e54c5f8ae4bb
  6 1ff444c7-5165-0185-a788-5b2d5531fb02
  7 cb444ad5-9701-40e7-a128-a357b0d02a4b
  8 26734ba5-da34-5f6d-b0b7-d8e62f4d1435
  9 9a38f301-01be-035d-9b18-1ff4696a22bf
 10 70b21965-a2cc-2591-8dda-e53b71c440dc
 11 47a68b79-a157-4d95-923c-ca5611205327
 12 1fc16e71-da22-74b0-abba-9c9b6bfae974
 13 846a37cf-15d8-5ceb-9a35-0fc748aada3d
 14 b5792f0e-9c21-7f84-8bb4-913db566bdc9
 15 26f246f9-dd7c-2f47-847e-a70e2c479af5
 16 cfe09202-2327-3a02-9da3-0ed72832781c
 17 f152ae93-6e8c-3f39-964a-beb0b1c1f6d5
 18 d5ac61d0-299b-8072-a8a5-97128bb03125
 19 82824d8b-f5e8-13c1-9f99-f96cdd727bd6
 20 e7b6e08f-28a1-38fc-a92f-e52b7cc2300c
 21 1dbd98f4-1491-8b30-9a51-75ca2c0bae31
 22 aa05225a-2825-0405-bb08-1748e4eac5a6
 23 b9fc1b50-7cbf-4a02-b6c9-a1fd3b68bdeb
 24 7230652a-f199-0564-9fcc-313d748df3d0
 25 66288560-c1fe-56cf-b110-bf6bae706604
 26 1fe516c0-ac9b-1714-b85d-268f0a072c47
 27 05c7c42c-ed9c-53a0-bcec-981c2f61d51a
 28 62e59b6c-e073-2176-8bb0-a79b77d1e868
 29 12ca689a-0921-8b67-97e1-994aa22d9478
 30 793827d9-c5c5-4072-b60f-2c745d35e67e
 31 d6fb2e28-f0be-5e1c-8e01-7ded8977ff00
 32 919b2922-13a1-268e-adf8-8d2bd5376545
 33 cd5a3522-dd54-8b29-a2e5-82c261e12c3b
 34 24ac9354-6443-442f-a57d-5aee0c31530e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1004104502475723381380405152845284. Exactly this sequence comes out of new Random(979).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 95 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 34; the post has N = 34 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results