A858DE45F56D9BC9 archive

201209231440 10cnuj

explained decrypted filler

3DES(name+title) ECB, 29 GUIDs, seed 383

Metadata

Post ID
10cnuj
Title
201209231440 → 2012-09-23 14:40 on A858's clock
Posted (UTC)
2012-09-23 18:40:14
Timezone
UTC−4 · title 14:40 against posted 18:40 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,872 hex characters · 936 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209231440) = 758c142a18a14c0476c24a9ebe7e66ef (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
29
Filler GUID seed
new Random(383).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
117 · predicted N = 29 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,872 hex characters = 936 bytes = 117 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209231440 (name+title). Key = MD5(password) = 758c142a18a14c0476c24a9ebe7e66ef, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 29 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d3fca4c6-b5ed-7ad2-9729-ca49047d9db0
  2 13ae10d6-8388-104e-a30d-e1e739e3b6e5
  3 56cf9592-66af-45ba-bae3-9064bdeb0d09
  4 3dd5858e-9e52-2524-bf73-71c35c313be7
  5 c15a0878-d47f-14f7-8bb4-273ac701849b
  6 7d62228a-9206-2911-aff2-20e5a6f8962d
  7 b0d62d3c-b2e9-4621-87d7-d53b9cf6c5af
  8 689076c1-4b70-5c43-a87b-1a82ec9723d5
  9 8ef27ca3-5d3a-3201-abd5-f980a6d1dcf9
 10 de5bd062-7186-4098-a25a-f8512e8968be
 11 be21f2eb-57e2-4262-82a0-30c571dffacd
 12 6c13eb67-93d4-4572-9502-bcd0203a0aa3
 13 bd896976-74b1-87aa-a06c-fd24d008e573
 14 13447f33-1d6c-6c5a-a980-761c101713ac
 15 8bead535-ebac-016c-b10e-96c0e2cac2c5
 16 992be130-bda2-17fd-8e2a-d60e87ef900a
 17 14397eca-6f2f-78ed-a641-6fd1153db73e
 18 d1b4e5b2-a5d7-4c28-96da-b67453800e02
 19 61a6d2a9-16f7-0fec-8290-47037813dcec
 20 466d1163-ac96-512e-b322-7f8f33ba124a
 21 961b4b21-6282-6ce8-8baa-7c058d7dd612
 22 f94939d6-ed54-7d1b-8467-fd9c9d6d1b7c
 23 3a8a2f3b-9856-6c14-9aa0-aabd17130070
 24 78f41c5f-b751-79e7-a946-8be648318ed1
 25 9e6cde4d-da4e-2de5-92d3-56c470750603
 26 89f1002d-60f7-70b5-8a51-4734008d77f1
 27 6b518f83-07e6-27d3-abaa-57cbdc12474c
 28 48d0f836-198f-8dfe-9a27-1159bbe85480
 29 b5649c96-84c1-3644-adfe-ed4241d373bb

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 71421245344486017405676727283. Exactly this sequence comes out of new Random(383).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 117 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 29; the post has N = 29 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results