A858DE45F56D9BC9 archive

201209241249 10dk8d

explained decrypted filler

3DES(name+title) ECB, 29 GUIDs, seed 979

Metadata

Post ID
10dk8d
Title
201209241249 → 2012-09-24 12:49 on A858's clock
Posted (UTC)
2012-09-24 03:49:40
Timezone
UTC+9 · title 12:49 against posted 03:49 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,872 hex characters · 936 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241249) = 0592c14da1620ccd53f1a1d2f5832277 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
29
Filler GUID seed
new Random(979).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
185 · predicted N = 29 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,872 hex characters = 936 bytes = 117 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241249 (name+title). Key = MD5(password) = 0592c14da1620ccd53f1a1d2f5832277, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 29 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d7087243-a303-195c-9ab0-a8a9ed0431f6
  2 1e310d25-dc89-04c7-8e0e-732de303ea03
  3 7154da49-9276-042d-8688-5f7d2f9feb08
  4 ca716fd0-c0f2-4fcf-800e-248ebad5309d
  5 24a18bed-8dda-129d-847c-357e404f9256
  6 d8aeaac9-8fca-0c46-98d4-5d66ff6dfd94
  7 96304813-bafa-4fe2-8b1e-e37307128b76
  8 d8dff417-979b-555e-8345-ec3fb6777c81
  9 12767400-6c22-09ce-a876-d079d48e9508
 10 774e8dcb-2d54-25ba-9b78-9a99b14944b0
 11 ff28d352-fec4-43bf-acf2-e73413c32ecb
 12 1a087160-df41-7dc9-9bce-0c242e010ced
 13 48d54484-493a-5cd7-a446-4308b39e867f
 14 9a7853c2-4987-7977-8141-83354dc9f121
 15 b8e86915-ed2d-22ca-9b11-e51ca8535a18
 16 b74aaa76-df1c-3004-b370-cfd10837cb65
 17 c87c7208-3465-3142-bebf-f40b76fa58c3
 18 9197cb1e-8ffa-8cd1-a585-3aded460071d
 19 fff4b353-9c4c-158d-9321-86c04c61c9a3
 20 abc8a96f-ef84-395c-afd2-a74a27b3b54e
 21 6c0af0ff-58a9-8678-8cb6-b0a3e4b6960b
 22 424d1c31-dac2-02e7-ac81-675053827aa4
 23 1ce4025d-8a0e-48e1-a877-a0df8ece87a8
 24 90294ca0-f54f-0da5-91ce-b9d1126c1fe7
 25 ac2fcce7-225d-52e4-b39c-ad25aaaea778
 26 1cf21cb1-09e7-16b9-a305-93f8b6b6c057
 27 543d864d-23e7-58a6-a94f-6f9464599229
 28 a7fa023a-ea6c-25c9-be36-d8774a8bee9a
 29 8be05e7e-0b0f-8882-9e55-4eb72b8409b9

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 10041045024757233813804051528. Exactly this sequence comes out of new Random(979).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 185 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 29; the post has N = 29 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results