A858DE45F56D9BC9 archive

201209241223 10diq3

explained decrypted filler

3DES(name+title) ECB, 38 GUIDs, seed 159

Metadata

Post ID
10diq3
Title
201209241223 → 2012-09-24 12:23 on A858's clock
Posted (UTC)
2012-09-24 03:23:18
Timezone
UTC+9 · title 12:23 against posted 03:23 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,448 hex characters · 1,224 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241223) = 07d99d29b8b7060f221e2379674f6d60 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
38
Filler GUID seed
new Random(159).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
159 · predicted N = 38 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,448 hex characters = 1,224 bytes = 153 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241223 (name+title). Key = MD5(password) = 07d99d29b8b7060f221e2379674f6d60, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 38 GUIDs as hex (shown below).

Decrypted: GUID list

  1 f8ce7467-242e-78c4-8e09-992ffc275d7e
  2 e0986882-7566-47f5-a27f-78d3eae5bdd3
  3 4df48ffb-dda8-8449-afec-16844c7bb583
  4 d0028d3f-2170-4b89-9fe8-15ddbde8ff5a
  5 a0ba2eb2-5c5f-845b-a813-674eeba7cb16
  6 c14040d4-84fc-4dd8-b383-d3bc8bcf86cb
  7 238dfc1b-e857-1e99-bbd6-5341243eccdb
  8 01b7bcbe-0e29-15cb-bc03-dfbce2865a7e
  9 cca864af-6fa0-54b7-8227-bb24514acc7d
 10 4b9c7dff-fff3-845f-8fe2-e12b94e85826
 11 606fb90f-bc5c-3592-a71c-2e8dd1965b50
 12 657b5e00-a054-56ab-9f43-0f04ce2dd6ea
 13 b63c2e90-efee-8266-8581-b92c96e822d8
 14 efaea1c2-c2e2-1632-997c-dd7f624c0759
 15 8a4cd2e7-e653-2a9a-820e-7f3e1f9e829d
 16 386f90f7-abb0-22a2-92f0-495c75c40b45
 17 5b4486d4-97f2-6cc1-87e4-d0758cad2c6d
 18 744263e7-5138-54e4-ae45-6e5e5dad9b8d
 19 20058cfa-bd1f-88d5-b7da-8dd63322490b
 20 e0c6cb47-40bf-7806-847f-16e3d05903a7
 21 3211573e-4e6e-8a2f-8b1a-0c66f71beff1
 22 1c6d9744-0a41-7995-8158-528c8550ce92
 23 4ed462fb-f472-7ebb-8840-d85f361cd8eb
 24 5751db93-7baa-5b12-85ce-d64bad5cb9d5
 25 8a28f81c-b99a-258f-8874-c89cc0f49f83
 26 f132b708-6c21-7dd8-9364-af165552f9a1
 27 3465fecc-8c63-5f90-97b5-cb643b5e66cc
 28 b94232e7-64da-1d13-91ed-ae09b04cf6b4
 29 acc03520-7377-48fc-9df4-50daf80cf4a9
 30 38cc649f-b74f-1129-8cbc-cfb6c7b2149f
 31 4d57151f-2eea-76b2-a321-b4d9d94ed891
 32 19892d68-96e1-30a1-92cc-a19ed2c208fb
 33 7dfe0e84-6ce9-20ff-8bac-8e90502b56d0
 34 d91bd56c-ebe4-8320-b2d9-368288a4863b
 35 e4f09b07-fb46-1f49-95ac-854897bb8a2e
 36 e3dd1f21-38eb-5b20-af1a-8b72b8730c5f
 37 59ba65d5-d3b0-6efa-9fd3-216114836c27
 38 2ad732f9-e5c6-67cc-adeb-330a1f0c25dd

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 74848411583581226587877527514173281566. Exactly this sequence comes out of new Random(159).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 159 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 38; the post has N = 38 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results