A858DE45F56D9BC9 archive

201209241212 10di37

explained decrypted filler

3DES(name+title) ECB, 37 GUIDs, seed 310

Metadata

Post ID
10di37
Title
201209241212 → 2012-09-24 12:12 on A858's clock
Posted (UTC)
2012-09-24 03:12:12
Timezone
UTC+9 · title 12:12 against posted 03:12 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,384 hex characters · 1,192 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241212) = 48f86ecd18edfe5111ffdb85551b8bc5 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
37
Filler GUID seed
new Random(310).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
148 · predicted N = 37 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,384 hex characters = 1,192 bytes = 149 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241212 (name+title). Key = MD5(password) = 48f86ecd18edfe5111ffdb85551b8bc5, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 37 GUIDs as hex (shown below).

Decrypted: GUID list

  1 53e51386-9bf0-6ca4-bee7-43dccdd8d9f7
  2 9d0ccfec-be95-6457-8522-751660c2da42
  3 3d28b504-2e0b-49ae-9f5c-619f3f64e3b0
  4 8101e0eb-5860-6b75-83ff-8af6f5def881
  5 9fcb4daf-0003-164f-a2af-e66c094c221c
  6 ca6a6321-1eea-4736-959c-f402062a448e
  7 386020ed-07e7-7e75-b3e8-4cc375324ee3
  8 cd1ebf11-9017-884e-87f1-60c9cd7b50f1
  9 d3419134-a5c6-243d-95e5-216309b0b31d
 10 cda63bf2-34d3-50e4-ad64-d614392fc803
 11 1ef75add-3628-6d4d-aa8f-c05af718a834
 12 fe21f4d5-a5fe-4104-a466-b8d044388c38
 13 3a6398dc-166a-69d6-86ed-c210986af428
 14 0d70e211-26f0-6918-bcb2-8405b2dda613
 15 561a02a3-362b-8122-aee3-b783fd4d07b3
 16 a4f480f0-ce36-5c7b-8d2b-82e1c383751f
 17 46269ccc-2cf7-1f8d-ae44-f191c6bf8d79
 18 3764ffc5-c9e4-1b2c-a440-482fc4c28087
 19 d5355f4f-5bb6-0e8d-8ccb-25a6b0150103
 20 29df966b-094c-3a3e-aa74-c270e62f2415
 21 89e3bf8d-2052-02d6-80a8-2bd74aa04b0e
 22 be49499c-18bf-88f3-9fd3-5f617e7a5f74
 23 9707caac-f358-3925-8ef5-6a5de2c4ba6b
 24 5cf45f5f-e726-2783-bdb1-13fd83b76a05
 25 f57a326d-471b-096e-b624-2960782ba3c7
 26 fc1daa0a-dac7-8492-b9a0-31edee1b24aa
 27 33e58fc0-965f-4159-a976-fd8f2e38a8db
 28 d70c8647-bb1e-6c3a-b9b3-8f6806e220dc
 29 34c05758-5b13-1c48-b97b-4ccbde2839b8
 30 29ad715c-758f-615b-9259-0085c3a290dd
 31 890ba3b1-b4dc-591c-9397-78dbea72941d
 32 9ea34987-7a90-0862-b2bc-181e94e2de24
 33 6e5c60d9-2f46-81bb-89ef-65184cc61b62
 34 7382acfd-6515-66cf-b5e4-ef71790c3b1a
 35 6c9ce16a-dc71-7385-ac62-ad55ea485d59
 36 dc29e2e2-03d5-1cea-b073-4a9b47263f55
 37 8817b5c4-71cc-7c9f-9641-48e01dda10b0

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6646147825646685110308320846165086717. Exactly this sequence comes out of new Random(310).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 148 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 37; the post has N = 37 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results