A858DE45F56D9BC9 archive

201209241159 10dhca

explained decrypted filler

3DES(name+title) ECB, 31 GUIDs, seed 913

Metadata

Post ID
10dhca
Title
201209241159 → 2012-09-24 11:59 on A858's clock
Posted (UTC)
2012-09-24 03:00:00
Timezone
UTC+9 · title 11:59 against posted 03:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,000 hex characters · 1,000 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241159) = 679ff389b09b800bd96ef165f03b2067 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
31
Filler GUID seed
new Random(913).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
136 · predicted N = 31 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,000 hex characters = 1,000 bytes = 125 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241159 (name+title). Key = MD5(password) = 679ff389b09b800bd96ef165f03b2067, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 31 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a77ae6cf-e199-6e6a-b635-0691f056111c
  2 904b89fb-129e-6e63-a374-8ff94ad57130
  3 daca6dde-be6f-852d-ab51-5d90abd8b4de
  4 d586c4c0-6a56-34a4-bb6b-80ab2ff1b216
  5 86dc2c8f-7e22-399f-b460-d81e4f97ff7d
  6 0bba8d80-0e8c-3b51-aee7-7d587b49f76c
  7 d7b25aef-63e9-8c88-b5d0-7762fd1a58f0
  8 b437ba0e-866f-40ab-8fed-c5ec05f8a9f2
  9 244b7c2c-9243-8928-9b6a-243fa57ae5c4
 10 66703a1f-3214-8b84-9fff-045cffcac14e
 11 0fe31531-f741-8527-91ce-5ad45fa7dc07
 12 24c38946-34b8-20a5-976f-84e9f91161a8
 13 819fd49f-8064-2c78-ab5c-2bb7bc181ed3
 14 eaa0d813-23be-493c-bd23-659dcb2ad35d
 15 0f22e931-dab1-074d-b7f5-04e372ed4622
 16 a5ae2c19-a9f9-1c71-bbbe-5cd89e59d191
 17 692f632f-9e44-5253-b3e4-1813b9ede4c4
 18 372c996c-f28f-0ea3-b9de-71bb547534fd
 19 4dea823c-014e-37af-9469-b682ddb81935
 20 3841c34b-6493-75c5-b49c-d94d080c3f62
 21 ea25b41d-e578-1a0a-aff4-2754aaf60434
 22 6c499e24-f56d-79aa-a0d4-81f50caac4c1
 23 3c67e8d0-77b5-20d0-8404-079e44d4fcb5
 24 76fe79d3-7045-8194-b1e5-3c4da11f7150
 25 9a63347e-1b35-149d-89e6-693e9e6488bd
 26 373e0077-e71a-6e1c-b2be-f0521809de40
 27 04385f8f-10db-844b-a417-72bbeaec194c
 28 675f03a1-45ed-3892-80dd-02d9d4db2093
 29 44843f02-a553-6d1a-9a3d-c6786d6af33f
 30 b3ba781c-335b-3ae9-8c3f-96664e200748
 31 2c3f4d50-2f7e-2242-bb5c-791902277566

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6683338488822401503717281683632. Exactly this sequence comes out of new Random(913).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 136 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 31; the post has N = 31 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results