A858DE45F56D9BC9 archive

201209241222 10dinr

explained decrypted filler

3DES(name+title) ECB, 26 GUIDs, seed 707

Metadata

Post ID
10dinr
Title
201209241222 → 2012-09-24 12:22 on A858's clock
Posted (UTC)
2012-09-24 03:22:18
Timezone
UTC+9 · title 12:22 against posted 03:22 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,680 hex characters · 840 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241222) = 4f5f1e3940af10e40eb19cbece5c1b20 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
26
Filler GUID seed
new Random(707).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
158 · predicted N = 26 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,680 hex characters = 840 bytes = 105 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241222 (name+title). Key = MD5(password) = 4f5f1e3940af10e40eb19cbece5c1b20, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 26 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ded23f80-af56-0545-b3c7-f45e10316b07
  2 883c609c-135e-27e6-9f07-8282aa008fff
  3 c1352eef-4a2d-834d-a271-c5222c7855a4
  4 76cad9a3-1824-492d-9ed2-d2caa7b8dbd0
  5 ec7ba1aa-7b3c-3071-bd27-03561b2ee4f0
  6 857c460b-78d0-310d-a6c2-c498616e11ef
  7 0cb9df92-8926-697b-94ef-3b5508e91308
  8 1d634623-e1c4-1d74-b3ce-d5aabf334855
  9 93d9c9c6-f7cd-4edc-a46d-116ec0ff2485
 10 5571c318-841d-8260-a6e9-e8b067ee2938
 11 54df2ec2-4140-1102-964c-39ddbe536f9d
 12 e2af61da-00e4-3d75-a6b5-78a0c59921e9
 13 4b47bbc1-02f9-5ffb-ba0d-789907583241
 14 eb272816-ef45-2605-a8bd-9c9c25ca22f0
 15 823611c8-7e2d-722e-b4e8-7b59929e24e6
 16 34f31cc8-4e14-55b9-94ac-804f05e8f0da
 17 d65a53c2-c418-0fb1-b2ec-35674119a933
 18 f498e4bb-f862-3fdc-a13e-8ce19bfb1c64
 19 2db11f13-8f80-70a4-bc4e-20ed064b77e0
 20 87c3501d-dfb1-08f7-b192-9293ceaca605
 21 8f51da42-eda9-6246-a57c-f32e3d07f981
 22 1eba6daf-50ae-2745-ba30-3a97cd1bb5e4
 23 f0b530f0-a01a-4e55-8383-c3b09b98786b
 24 56e9a887-cb96-0275-aa98-0408023510d7
 25 cb22d2af-8e7d-8268-aef5-33af6f599d45
 26 8d7b6276-a563-28b2-8814-931a90749369

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 02843361481352750370624082. Exactly this sequence comes out of new Random(707).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 158 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 26; the post has N = 26 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results