A858DE45F56D9BC9 archive

201209241240 10djpy

explained decrypted filler

3DES(name+title) ECB, 29 GUIDs, seed 330

Metadata

Post ID
10djpy
Title
201209241240 → 2012-09-24 12:40 on A858's clock
Posted (UTC)
2012-09-24 03:40:33
Timezone
UTC+9 · title 12:40 against posted 03:40 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,872 hex characters · 936 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241240) = e5bb1ccee65d5144a6c689e56a0222b6 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
29
Filler GUID seed
new Random(330).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
176 · predicted N = 29 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,872 hex characters = 936 bytes = 117 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241240 (name+title). Key = MD5(password) = e5bb1ccee65d5144a6c689e56a0222b6, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 29 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5d242bb2-656e-16ab-91b2-e325c92407d1
  2 ac762ed9-027d-597a-84c8-462786f5da51
  3 8d386c6a-c68e-34a0-9393-55190edeabd0
  4 fd278005-b708-8cb8-a30c-bebfe750fd44
  5 c220362a-742a-1e7c-a227-256431f9b38c
  6 86f0253b-3899-8615-add7-3f4c3617433a
  7 6593c89e-e90a-6c4e-9618-fd6fe8ef03b6
  8 a5e13d99-15ec-8835-9d10-6f0c961682d1
  9 ab3c6223-ab10-7bfb-bd7d-ebfab5c7a2f1
 10 4973cb98-e6bf-8fd4-a728-7a3048bfcaee
 11 44a7d03e-d894-37af-b366-f948a4ac26bd
 12 a50ddfe2-b6bc-0add-ab2c-c23b2c7be4a6
 13 eec986aa-b92f-4e9c-8338-51528787e344
 14 3a3f0c7c-8a17-1895-93e4-d76e7bf44661
 15 f96543bb-084a-8191-88b5-6a8ce5eeb244
 16 6ad0b166-3fdd-1d42-883d-df21556accfa
 17 f7c68600-397d-5569-bf61-53e593f6f655
 18 48caffca-ab7c-56cb-8b82-37f9ba553399
 19 a6a31101-9602-5e78-bc93-4cca4625f9ba
 20 72eabba6-58be-0a1a-aece-fabfa022f14c
 21 50148558-a84f-5d39-8222-f5537bfce099
 22 4fd7234e-84e4-7e1e-af67-5b310a9ec7fb
 23 94bc0ecf-589d-6c87-9b98-819dbef37292
 24 4488f06a-20a2-24e1-b73f-300176a18b34
 25 9655eeb3-c7ac-0603-9a74-e9f445964c1c
 26 b2d8523a-2284-686a-9ec6-c2f3fd7e0261
 27 8f1602c7-8df9-5480-8b6b-84c1a75bf8d1
 28 e208d084-2ff5-127f-b405-c16b47c25601
 29 bb576244-ba3a-6e1d-86d5-1f47d621bff5

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 15381868783041815550576206516. Exactly this sequence comes out of new Random(330).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 176 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 29; the post has N = 29 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results