A858DE45F56D9BC9 archive

201209241225 10diuc

explained decrypted filler

3DES(name+title) ECB, 37 GUIDs, seed 579

Metadata

Post ID
10diuc
Title
201209241225 → 2012-09-24 12:25 on A858's clock
Posted (UTC)
2012-09-24 03:25:19
Timezone
UTC+9 · title 12:25 against posted 03:25 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,384 hex characters · 1,192 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241225) = 8d3c0a6df3ae8b89b778ff3d9b259e0f (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
37
Filler GUID seed
new Random(579).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
161 · predicted N = 37 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,384 hex characters = 1,192 bytes = 149 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241225 (name+title). Key = MD5(password) = 8d3c0a6df3ae8b89b778ff3d9b259e0f, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 37 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e36f915f-2ced-1962-bf13-36d076073baa
  2 be2e8e84-c8df-60e4-9a37-70385d0c14ba
  3 9c79b277-b2d0-41bf-9484-6dc4be48f0ab
  4 80b89ee5-9825-1dfd-b224-7933e4c4ae33
  5 f4b765fc-2eee-592c-b7a9-f751468620b3
  6 8f58e709-97a7-446e-8b95-37ce3a209010
  7 f714b828-4fd4-2d26-9bf4-f9252877a504
  8 4c671910-1ab0-8c80-91b8-37b10c1843fb
  9 8023c9b9-0efc-5068-9c1a-38ccac61cda8
 10 a39328e8-f192-76ea-89bf-5f4760d8a0c7
 11 b7b97dbf-58cf-7884-a092-1485f922503c
 12 2c8d47a7-151f-477a-be66-4e4cd2e5249e
 13 6fd6a4f2-15a7-695b-9166-c1383d07174d
 14 0cfa8416-47b6-6d2e-bb6e-0b83c27d81fe
 15 4508ae4f-13fb-2efb-9c61-fad6e08d9859
 16 6fca4100-f35c-5a8c-bd3e-e51d4647408a
 17 4c507cac-8e2e-22fe-822e-f12faf93dc20
 18 d1149e49-e5a5-8f67-b25f-2f4ab117c71c
 19 97ada6a7-0f2e-3c78-92e0-b8262c884ee5
 20 6d602caa-b821-4281-bd49-ae356dd30a98
 21 508d1f08-fe11-634c-8d57-a9e0155f7309
 22 ba9c59b4-af47-8790-9bc4-2f926bc19538
 23 9d42f04e-558f-7ec5-bfec-cfc8cdce5501
 24 6c931a61-61e1-2cfc-a32d-e074365ea618
 25 18920e78-5d94-41a3-8333-c7299013f9af
 26 f373650c-6f0e-8f36-9362-5386a4568169
 27 56415b8c-b266-6eaf-af57-b7e926aa7c7a
 28 8456d56f-706a-3711-9133-c2a72cda491a
 29 5eecbf80-f486-4c29-a425-20140170ccf8
 30 c0c58f83-10f5-3c36-9e83-d6ebc9dc4f32
 31 7e11d509-f107-8d20-a141-2d8a13c66810
 32 a6ee3fd0-b9a0-859e-b594-122e99506258
 33 92d060f2-0768-117a-8dca-8b1ffe5ed67c
 34 a2251d4f-2feb-4932-8b20-98680eb46544
 35 3f57425c-e20a-7ffa-a8ca-dcd650ae745b
 36 4f7cba16-118b-7819-9e6d-2d65ece097aa
 37 d17c836b-078f-5730-a749-544439845fda

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1641542857746625283468724863438814775. Exactly this sequence comes out of new Random(579).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 161 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 37; the post has N = 37 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results