A858DE45F56D9BC9 archive

201209231452 10coil

explained decrypted filler

3DES(name+title) ECB, 37 GUIDs, seed 118

Metadata

Post ID
10coil
Title
201209231452 → 2012-09-23 14:52 on A858's clock
Posted (UTC)
2012-09-23 18:52:22
Timezone
UTC−4 · title 14:52 against posted 18:52 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,384 hex characters · 1,192 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209231452) = 0bee9b38ba144f39470d97b59272d016 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
37
Filler GUID seed
new Random(118).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
129 · predicted N = 37 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,384 hex characters = 1,192 bytes = 149 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209231452 (name+title). Key = MD5(password) = 0bee9b38ba144f39470d97b59272d016, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 37 GUIDs as hex (shown below).

Decrypted: GUID list

  1 be0e68c0-515f-3208-84d6-ac9f802e3b61
  2 57a5bd0e-4d1f-329d-9c7b-1cec02f263b0
  3 4998afbd-e433-2e55-b1f0-29dd871c5494
  4 e25e779b-b650-680d-afdf-07833523a5e2
  5 aad6b158-a543-4256-8f3d-bb5f8cf614b6
  6 c55ac62c-93d3-6211-aa7d-31241dc76471
  7 02a35cc5-e2e4-615f-aa76-67f191a39f28
  8 457e186b-c797-56fb-8373-064a7109ab10
  9 89e4ed87-a3dc-5be4-a550-c9783b5823e7
 10 18ca0776-6829-7870-829f-a7216f77ce94
 11 3de23098-9e1b-21b2-9d0b-99de630e85c8
 12 2f5f7d71-e080-5f5c-87b3-f8e2e213c400
 13 4b59a46d-2443-6172-a983-7d0a837bea06
 14 9faf50d4-36e7-7077-8dfa-b8c2032578ea
 15 8cd08035-0b7f-59f7-a64e-c1ede3e0cf63
 16 c8009942-5ec5-6c48-afce-90cdcf30b7fa
 17 4db8eedf-6cd7-434b-b66d-3036939ebab2
 18 1b862b02-007f-17da-8dd1-9d32a7d07f9a
 19 30a3d73b-4b41-7838-9aca-9f1cf148652a
 20 edc7f1ec-3669-0454-b523-7f26b35d0fc7
 21 9ad3c4c4-13d3-4b29-bca0-049d539b641e
 22 d765be42-d924-77ee-9c5a-91bc9da926f4
 23 f4be44b1-8ba9-8c9b-b321-dc0953582b93
 24 c2caaaf0-4e5b-2648-9a1a-899c3cb5c77c
 25 d7eb5d9c-4337-22df-9e2d-1fa13009aa23
 26 ef5230b7-4ee4-39ec-b6fa-4f1a43b5abe7
 27 d1a72399-d4b1-3dfe-9833-315567a69e95
 28 25dab8fe-f906-7708-a938-f57f8175313b
 29 295ae869-8a61-12f9-8c0b-b5ee4d6f550a
 30 e482372f-ec0f-16ef-a13c-8ffb0bc05a08
 31 7aedba08-e0b0-6ee0-a2a9-362db4e9ff02
 32 33bd41dc-6259-4ef4-9606-1a9e511b689b
 33 815464e7-6364-6250-bdb7-3761a0b7384c
 34 5588e9cd-7e03-8f95-ad53-e8cd19a9de5a
 35 1c2a5223-d80f-7092-af08-073f3717f669
 36 653ea935-95b6-704a-bd76-ddae706bce66
 37 8999a29e-5f49-62a1-ac70-c7f464d56c78

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3326466557256756417047822337116468776. Exactly this sequence comes out of new Random(118).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 129 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 37; the post has N = 37 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results