A858DE45F56D9BC9 archive

201209241236 10djhb

explained decrypted filler

3DES(name+title) ECB, 31 GUIDs, seed 352

Metadata

Post ID
10djhb
Title
201209241236 → 2012-09-24 12:36 on A858's clock
Posted (UTC)
2012-09-24 03:36:25
Timezone
UTC+9 · title 12:36 against posted 03:36 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,000 hex characters · 1,000 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241236) = 7d7462b2afbc2936db2dc77e14275b25 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
31
Filler GUID seed
new Random(352).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
172 · predicted N = 31 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,000 hex characters = 1,000 bytes = 125 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241236 (name+title). Key = MD5(password) = 7d7462b2afbc2936db2dc77e14275b25, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 31 GUIDs as hex (shown below).

Decrypted: GUID list

  1 432548bd-b203-5bc5-b747-a7689337b526
  2 19e3183f-fa5e-07c4-9511-d25aea2a4e51
  3 3d2938a0-34a8-7321-9f24-83ce751db40b
  4 20288b62-fa65-6be0-b0d9-42456b017d76
  5 73d55f77-b553-149b-a9bf-5b98c5ebb985
  6 db507b0f-246c-1736-be2a-f70bc00f96e4
  7 d9a67f07-0caf-574b-91fb-bfbdfd6f7e99
  8 1c17e5fe-7751-0f1c-8345-89d8564bd4db
  9 d6715aec-6bd1-4542-b496-92dd6b4e1c31
 10 a123da91-959f-0821-bb8d-65ea27ee59fe
 11 ca7e7b40-0511-57b5-a9f8-f795f563ae6b
 12 40f96bb9-6aac-23e5-beeb-e062e371ddcf
 13 805c74b5-4908-5dbc-b4da-20b10f0de55f
 14 7104e01f-9441-578e-ab40-0454d76ec126
 15 b5629f62-65ff-3c52-8dda-9e8d4e635f3d
 16 30b6b269-5c66-7726-93c6-056bf1c5121c
 17 3cb6a66e-fefd-7c69-a31d-9bf73a4fee6e
 18 5f5e0ae0-56a5-2023-ab54-8ff1007901e4
 19 99e6de39-bc81-1861-ae46-dade7b1d8ca8
 20 608ce5a3-093b-5ca9-b786-5722d1c3b415
 21 610b969f-eebd-5bd3-aa54-552523d12d18
 22 e1fc7ab9-ee4b-11c4-b427-39ba635d5e12
 23 39e654f1-ab36-4818-882f-5ff864ef36b7
 24 bd41ae36-ccd7-0fc1-ae5b-c37a34a2bdba
 25 3afaddfb-ffb2-1c10-bd13-02537aa22212
 26 677019ca-f94b-881c-a5d0-af5c96586ce7
 27 8b40283e-7bab-57ea-8e9e-8a31aa9b2c55
 28 839887c3-1129-7e77-a3c0-e91669ba6d20
 29 805c3c62-2bdb-657a-b940-795f7a0d834b
 30 06ee50a0-e1c0-5018-9915-fc233911c7a1
 31 ccdf0051-67c8-1520-9006-502e88118414

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5076115040525537721551401857651. Exactly this sequence comes out of new Random(352).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 172 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 31; the post has N = 31 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results