A858DE45F56D9BC9 archive

201209241217 10dids

explained decrypted filler

3DES(name+title) ECB, 26 GUIDs, seed 337

Metadata

Post ID
10dids
Title
201209241217 → 2012-09-24 12:17 on A858's clock
Posted (UTC)
2012-09-24 03:17:15
Timezone
UTC+9 · title 12:17 against posted 03:17 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,680 hex characters · 840 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241217) = ca58f066ba80e2be40517ea630ec9cb6 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
26
Filler GUID seed
new Random(337).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
153 · predicted N = 26 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,680 hex characters = 840 bytes = 105 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241217 (name+title). Key = MD5(password) = ca58f066ba80e2be40517ea630ec9cb6, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 26 GUIDs as hex (shown below).

Decrypted: GUID list

  1 70c8c691-c35d-74c6-93d3-e7b6356dfddb
  2 bdc058c7-df41-6117-b4f0-3ecfaabfa807
  3 6f7862c1-a4e9-29dc-be21-7b49316a6f66
  4 10452a03-dcdf-4311-aa5e-192d5d94f856
  5 17859dde-3a31-3801-9a0d-d662bca75104
  6 49328d52-ab25-0569-8f3b-42a47ec3d229
  7 ea2dea69-9ca8-8eda-8893-c239d7587a01
  8 75fd87ec-685a-495a-8862-001e43b2df90
  9 a6189a63-4f69-6cb9-8912-8bb5b800f76d
 10 b44cb3fa-c252-48b2-ba49-a8a26d0fa687
 11 c5408aae-d3ef-5d9a-9ef1-d1f651e60cdd
 12 5d842e13-550c-583d-9f39-c795342f7de8
 13 e67dd590-9cd2-2b22-aec5-6c9deed44189
 14 8b86a9cf-52bb-74b7-bafd-fd89c4b1ec80
 15 d63d381c-1657-7b1f-9eec-526fbfc920bb
 16 f6190b75-0df3-4ce1-9c39-67b98046b837
 17 bae8927c-1d92-42ec-ae35-c8919aeb0b25
 18 ffb83f88-7c7d-8303-a839-73fc2b16609a
 19 64b6fec5-fdd1-7f4a-a3b7-24c9f756c061
 20 7a65adfa-65e8-7e31-a8d9-a2f51d012dfa
 21 41bdb411-b792-5195-a8c2-070398a6d9cf
 22 643717c7-691f-4472-8498-57152e5273da
 23 ba8113a2-9f8c-801d-85e2-18eed64b8d7a
 24 dafa6008-45e2-6d02-9a1b-0ab98ff39e20
 25 78fa1325-3a56-68ff-8ec8-fa915e8180b1
 26 3e68e359-3a2c-2969-933a-d39ef32b9297

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 76243084645527744877548662. Exactly this sequence comes out of new Random(337).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 153 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 26; the post has N = 26 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results