A858DE45F56D9BC9 archive

201209241213 10di5l

explained decrypted filler

3DES(name+title) ECB, 26 GUIDs, seed 840

Metadata

Post ID
10di5l
Title
201209241213 → 2012-09-24 12:13 on A858's clock
Posted (UTC)
2012-09-24 03:13:13
Timezone
UTC+9 · title 12:13 against posted 03:13 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,680 hex characters · 840 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241213) = cd47eb4f5ef3483c29fee0924e018642 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
26
Filler GUID seed
new Random(840).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
149 · predicted N = 26 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,680 hex characters = 840 bytes = 105 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241213 (name+title). Key = MD5(password) = cd47eb4f5ef3483c29fee0924e018642, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 26 GUIDs as hex (shown below).

Decrypted: GUID list

  1 722ede46-74ee-52fd-af3a-5dc68726b2c5
  2 69d8913a-a674-2f3f-8759-87fa4b0b21ef
  3 4a9a035e-19cd-806b-8c64-7b99441292cd
  4 49234d4e-41c4-7524-933e-9881ae6fa49d
  5 734754f0-b7e4-48e2-b6a9-8f8632af66fb
  6 26b8d49a-dd8f-5cde-8bb8-6925435a3a71
  7 f09754cf-a5de-2536-8d63-9f00b31aa9c9
  8 6a5b67bd-48f6-755f-9b6d-bf8bd8b6a854
  9 969d1f46-35de-86a9-ac98-8b9315cb5b28
 10 da253db1-bb1b-0f82-947a-8487ec07b22d
 11 2728c1a2-b7b1-149d-83a3-04a723983b59
 12 77ae7264-b2b6-2afe-ba29-e9c8d283adbf
 13 582f049b-e902-034b-8ec5-5e6221c00ac4
 14 e3459f77-2c35-40a5-b745-85bad9d96364
 15 18e7bcc7-5e2e-89f9-8a4c-5190127b908b
 16 251c383e-7aa2-5ff8-85b9-d54303e17086
 17 6137dd73-d15c-8293-b0c4-323cced1edbc
 18 d1846c1b-25f7-751d-9115-5f3d7cf82e11
 19 118d4d9c-3ac7-3c86-8725-ff3b0cedf44e
 20 05a03eb4-f386-50e9-bc33-a78c768cffa3
 21 fe94899d-fc4c-3213-ba93-d65b32d8ca14
 22 1d7403c5-3857-890d-8b69-a0d09d2d71b5
 23 464a6703-360e-8a6c-b2a8-d5f2f36a1f18
 24 d93f9cef-dc5b-4c15-82c8-e976d2a8615e
 25 96da305e-d2f1-03b6-8f6f-02caf1467e57
 26 02518634-ed44-7e33-a48f-469e3c8146ab

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 52874527801204858735388407. Exactly this sequence comes out of new Random(840).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 149 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 26; the post has N = 26 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results