A858DE45F56D9BC9 archive

201209241239 10djo0

explained decrypted filler

3DES(name+title) ECB, 28 GUIDs, seed 456

Metadata

Post ID
10djo0
Title
201209241239 → 2012-09-24 12:39 on A858's clock
Posted (UTC)
2012-09-24 03:39:33
Timezone
UTC+9 · title 12:39 against posted 03:39 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241239) = 607ffa3ff54df3f7913a1b91dfe60a24 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
28
Filler GUID seed
new Random(456).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
175 · predicted N = 28 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241239 (name+title). Key = MD5(password) = 607ffa3ff54df3f7913a1b91dfe60a24, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3bdb5cab-ce23-8912-8e89-92f492736dba
  2 bc0bc533-ebe0-5127-8483-bb2840134076
  3 c061093d-f452-4d34-8bf2-52c2cbf66c04
  4 6730d038-9c75-7261-ad14-8b5109679cab
  5 7ac6796b-3afd-05d8-833f-01260efdf8e3
  6 3f142fd3-8460-0033-8e80-de0eeff9da78
  7 43e1ef09-026d-1e71-aa5e-ce8ca32a90a9
  8 accc66fa-6f5b-12f6-b069-b45135e579d8
  9 b25412b6-0c57-3e43-9a13-e97bd3e9659c
 10 4e768a89-a0ed-3eba-874c-c7587c0686f7
 11 4ee5e532-d902-23be-9021-b9b6161e0bbb
 12 cb56828a-1d88-4334-a6fc-0eb519f8cf2b
 13 d1d296d4-badb-07a3-8f03-5b68b95be0a7
 14 a1966b44-460c-6b35-9d00-e54cc0c39ff3
 15 7eefd40c-b78d-1b9a-9972-62825594c57c
 16 a158817c-9869-7167-8280-29bcd9832a1e
 17 372d15bf-8242-46f8-bd8d-5804bea82208
 18 765b0ec9-3d1e-60a7-86b5-12076a823681
 19 e269fee9-761a-0902-9c29-c9d404f10101
 20 d8cadc50-ad24-741b-ad2f-1934656b5bfa
 21 43aec180-97f8-3dce-9105-f97169bc5b10
 22 5711eeb0-3f1f-64de-bf36-7b1344a74f2b
 23 9d59f1fa-37b6-0e13-8604-1cd215d53975
 24 d34f9e51-42b9-3e5b-a77d-b6f1379d649a
 25 3d6d59d5-4454-37ad-883e-6624402a7db2
 26 2c83efde-7d15-75ff-bab4-4943d656c53f
 27 0e3df6dc-d1c5-8262-a57e-9410f0177c29
 28 0d4397fe-83f1-2a9c-8d72-52f1b1e9dbd8

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8547001133240617460736033782. Exactly this sequence comes out of new Random(456).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 175 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results