A858DE45F56D9BC9 archive

201209231418 10cmn3

explained decrypted filler

3DES(name+title) ECB, 40 GUIDs, seed 556

Metadata

Post ID
10cmn3
Title
201209231418 → 2012-09-23 14:18 on A858's clock
Posted (UTC)
2012-09-23 18:19:00
Timezone
UTC−4 · title 14:18 against posted 18:19 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209231418) = ba7b7e7d9453764f36940ead0a2c2eff (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
40
Filler GUID seed
new Random(556).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
96 · predicted N = 40 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209231418 (name+title). Key = MD5(password) = ba7b7e7d9453764f36940ead0a2c2eff, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 691b6765-5fd3-1e5e-87b1-973c158f7a28
  2 e9535150-fe85-8e4a-abfe-c4608e3fb48d
  3 36408b7b-34c0-3d94-8b44-4c248ae0eed9
  4 8092833d-416e-2e6b-9f5e-b571d2f33552
  5 42dd6181-67b1-265d-a585-a4af127d74c1
  6 db5ab0c5-b6d5-4fad-aaae-b1525f6573ae
  7 495044e7-e309-0a05-b4e6-3a95db279502
  8 3c02c79e-9011-3c13-b7b5-b316b8ae4231
  9 919569a1-5974-68ea-8ab3-b654091b9955
 10 d4a0d160-6fa1-219f-aa95-1f783a5b973c
 11 3928696b-c095-8e15-9578-b26e3a1c766a
 12 ba2dd251-9167-4649-8658-11091a1dc4af
 13 571fb496-3c4b-7479-ba45-04a00a646b69
 14 93da2fb5-404d-66e2-8b5d-9ecd1d7d2673
 15 570a14f8-df33-119e-b159-b02408ec7677
 16 8b472fe2-d724-2c76-a3c2-d90fe2966ed7
 17 cfc293fd-e176-5b55-abf9-216cac863f21
 18 da51f625-2276-63be-889c-7e7e615cb91f
 19 452a7b04-41e4-6ca0-9b46-e628a91177da
 20 460896bd-bdc6-5336-aa73-04fb46b4d4f9
 21 a9042b66-828c-664b-81d3-c8f5a0e30941
 22 f7bde19b-0c4e-264f-9ea8-7373a621529f
 23 0574c53b-2509-8208-a195-1d0c8df28f6a
 24 e3c2e779-2b00-2c7b-803c-e8982c7047dd
 25 03dfad3c-e0c2-1555-a647-93de9585706a
 26 64fa5632-0d2b-16ae-bde7-306939395969
 27 5ecc6cd7-99a6-864b-9e72-f11712f12333
 28 42f00a96-4e97-1b45-ae60-2bc08989646c
 29 b5eb357e-47ed-1eab-90f1-43bd474cd86e
 30 63952f0f-42e4-786c-8e48-55c48881a0db
 31 2ae90d91-a5ef-4f7a-892c-e844876389cd
 32 8446af81-aa2b-80c9-a1d7-89477361a9bb
 33 1dd13ccf-92ce-7a20-9228-b636485bc98a
 34 ae1c5ac8-bbc3-8039-9a73-99b7d90d9281
 35 dd281aea-57d9-7e86-9fc6-403ea983e78c
 36 33beb918-42a9-78bb-bcf5-d1f0529e2c63
 37 e7bef120-050e-5419-955e-498a012ad0f7
 38 41bd6b21-ce18-2b47-9b58-4981bd08f9d1
 39 05892887-152a-57ff-bf23-66982da7925a
 40 96959159-dabf-5b7e-b3b4-ed183dcf89a2

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1832240362847612566562821181174878775255. Exactly this sequence comes out of new Random(556).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 96 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results