A858DE45F56D9BC9 archive

201209241244 10djyd

explained decrypted filler

3DES(name+title) ECB, 30 GUIDs, seed 61

Metadata

Post ID
10djyd
Title
201209241244 → 2012-09-24 12:44 on A858's clock
Posted (UTC)
2012-09-24 03:44:36
Timezone
UTC+9 · title 12:44 against posted 03:44 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,936 hex characters · 968 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241244) = 336969174e0fdcb994f307d39df1495f (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
30
Filler GUID seed
new Random(61).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
180 · predicted N = 30 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,936 hex characters = 968 bytes = 121 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241244 (name+title). Key = MD5(password) = 336969174e0fdcb994f307d39df1495f, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 30 GUIDs as hex (shown below).

Decrypted: GUID list

  1 fac6ae96-2242-538e-9ef5-5228a552e56a
  2 72322d35-1665-6a27-9238-8f7482757eab
  3 b8ab2a7d-74e8-3863-968c-580a845ec574
  4 75bd43cc-66e6-56dc-a2b8-ac8c972e3f59
  5 93f7e473-ded6-6f29-937d-3f50475d34e7
  6 56c0d35d-2757-711f-b36a-eb345758b68c
  7 d9914099-3873-21eb-b0bb-1caddd5b3592
  8 59295e77-1c1b-0640-ab92-585dc5c88f0d
  9 0bbd1772-56c2-4f2e-82a9-4f3ff22b3ec0
 10 d5593430-2c26-60f3-bddd-ad60a6539ee6
 11 e9b08370-d5ca-278e-99d3-9be5ff065392
 12 5a4d2016-3258-0837-802e-56f2fde613fa
 13 aec2e692-3f54-5558-9f8d-c4fd7f1ef7bb
 14 3cc1eae8-1998-11fa-9496-b7b1edf4806c
 15 0c58a613-d1a2-66ce-9272-ccecc59e6b84
 16 27671a6b-5d8f-1fbe-b7c5-83cd5c5ec4dd
 17 a66d1fc9-ce8d-4265-a744-ae6b68489dda
 18 e16e0595-5a2b-7baa-9021-3400d3f9fe67
 19 bab0fef6-90a5-2997-8bd4-c399eac2bdae
 20 d217a595-3d58-8525-8762-0cba4833cd88
 21 f3e6e0bc-5e68-81ee-bbe3-e863eab60bda
 22 17c26ebf-1ad2-74af-a6e5-64529a44ad32
 23 3fa8a35d-2146-23ec-bc50-1640643f06a8
 24 9d029307-31fc-3598-a07f-eb6366a98042
 25 a3c4e1d8-6421-67b8-b94c-5f74ebeb980e
 26 5d6822e5-68eb-64d2-81f7-fb4c4c9a90cd
 27 0b717dfe-276f-38c7-989d-f4ab0b8f82c8
 28 6766e713-de04-4dde-96b8-e6a9b0abebe5
 29 d867583a-f6e9-3a4e-969c-1b364e58b125
 30 b71f5f3d-c60d-1bfa-82c3-ccc119049c34

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 563567204620516147288723663431. Exactly this sequence comes out of new Random(61).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 180 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 30; the post has N = 30 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results