A858DE45F56D9BC9 archive

201209241234 10djcx

explained decrypted filler

3DES(name+title) ECB, 36 GUIDs, seed 448

Metadata

Post ID
10djcx
Title
201209241234 → 2012-09-24 12:34 on A858's clock
Posted (UTC)
2012-09-24 03:34:24
Timezone
UTC+9 · title 12:34 against posted 03:34 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241234) = eae3d559775f3520fc3d0751fad08a27 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
36
Filler GUID seed
new Random(448).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
170 · predicted N = 36 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241234 (name+title). Key = MD5(password) = eae3d559775f3520fc3d0751fad08a27, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 bfa76860-91f5-69cb-adaf-223dcac6225f
  2 f2d83b59-ce63-2a08-9273-b5cbc7e7aa92
  3 2de8a320-0192-8c36-bac3-16ce5f434e66
  4 30bfc35d-d8ba-1c82-be90-41f5dde2bc4c
  5 0143aeb7-f97e-49c8-a6e1-29cc9a2738ac
  6 5d97e034-b0ac-00e0-9ff9-a997869eb1c7
  7 9bb1d9a8-c758-569b-8cab-140076afd908
  8 c2509451-097a-199f-bb53-ef580f0bee62
  9 b2171af1-4606-3127-b91e-ecf11f9a3a53
 10 f9710bdd-ff08-4a21-9680-cff1b4ee7040
 11 fb95c13b-06d0-36b7-8ec5-378fee1ff0f8
 12 ebdb15da-3340-2052-a66c-c7c122b027b8
 13 4cd9f207-b906-5cf9-9a82-c292e8419527
 14 8ec8dacf-82cf-4f89-a37b-920c87aaba49
 15 e2f26cf5-3008-5610-9bab-f403fa0e3ef6
 16 81d6d92f-b9a5-7ee4-a2f4-d97172a62a7f
 17 d4f36824-488a-1cb4-8e34-11685302af00
 18 220b4db5-e5e5-6391-919b-e4981e5ecfa0
 19 9f548e11-ee85-73e9-94eb-86bd2b22063b
 20 cb742298-3967-7f3e-9fe0-5bed608c4d7a
 21 402d66c9-1e7b-3d89-96a0-a4489a5868a6
 22 1e9634a2-b7b4-65e9-866e-d916ba6aade6
 23 da995c84-f909-69cb-a281-cdf79343b437
 24 3709e893-e6b4-46b8-b227-30278a0d1db4
 25 75574fd2-f773-5866-afc8-d2eead0c622c
 26 5d995708-ef49-69ca-b3bc-16c66ae03b8c
 27 919ec7c8-78ce-0457-84ef-e6c7a029dc4e
 28 045d4899-fcd1-233a-8f65-04d965f4fc64
 29 595950b7-2372-2bfd-b39a-5b34611c0654
 30 9e6447c5-d1ff-7b2e-b92c-58192f86e33d
 31 ca1c7243-d903-5390-962f-8c82bc7ddb3b
 32 5774cfc7-206d-4c85-a074-34771362a769
 33 96711545-c459-4ec9-a569-970f46e942d6
 34 dc32c013-5063-1d6f-90ca-e06f9a7e92fa
 35 1d82ba11-3514-0c7a-aa57-45193111a78c
 36 0a5ca4f9-61b8-106b-a4b8-285f93d92067

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 628140513432545716773664560227544101. Exactly this sequence comes out of new Random(448).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 170 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results