A858DE45F56D9BC9 archive

201209241256 10dkmq

explained decrypted filler

3DES(name+title) ECB, 29 GUIDs, seed 567

Metadata

Post ID
10dkmq
Title
201209241256 → 2012-09-24 12:56 on A858's clock
Posted (UTC)
2012-09-24 03:56:44
Timezone
UTC+9 · title 12:56 against posted 03:56 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,872 hex characters · 936 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241256) = af3c0ad437dd4deb312a677826d17a85 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
29
Filler GUID seed
new Random(567).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
192 · predicted N = 29 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,872 hex characters = 936 bytes = 117 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241256 (name+title). Key = MD5(password) = af3c0ad437dd4deb312a677826d17a85, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 29 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5081e3b1-94de-8a3e-92f5-8463f7bca4c4
  2 e26772ba-b1c3-1439-a247-51bc27864a1f
  3 36f0629d-d572-0a85-8307-7e07cc50114a
  4 efb4351d-7b81-54ed-ac06-7ada48256a0c
  5 94319203-f666-1b55-865b-11fc28ddba7c
  6 12dd1355-2098-0e66-87b7-77ffd8a459d7
  7 d2d03401-6475-85f4-8456-23a1811455b7
  8 08116546-3feb-80b5-bad4-ddc861d457a2
  9 5162bf04-1fdb-1979-8f2c-d84480af73e8
 10 96c2e818-d152-3fb3-b682-2397e2b3f8e2
 11 2f83d2db-cd06-0486-82f5-a3aa429ff340
 12 e8ee195a-c171-1be7-865f-f7c942b17c36
 13 a7211b3b-dc57-3146-be06-51df09984d42
 14 d9587049-382e-43a5-a029-2db962b99d61
 15 d35f3c28-3a5d-7c1e-a9d5-69806ecfc109
 16 9fbf4ba1-1167-1e92-b23a-f8ba0ccf1140
 17 5ebc9640-a551-1c3a-9789-5a598d104572
 18 4760cd1a-4b7d-4071-8adf-88b9aca18da7
 19 34bca032-fbb9-0846-be24-55881a8b7a5c
 20 353873c4-7d79-7e47-8a39-8cd1cac08b51
 21 1cd7d8e5-07a1-1bee-ae4c-6957a22b31b7
 22 f85d856c-4e13-83dd-9048-98b6e2236579
 23 14803e2a-3c6f-7075-9bd2-1a979c13c688
 24 80d3d8fc-84ea-192b-a5d3-ee798f5ea597
 25 bc672b0c-fbc2-2467-b515-65c7cafb8147
 26 81e98c87-f2d6-1c76-896e-58bde576daf8
 27 a3874603-2b54-37db-951e-beb60f64f859
 28 270599c3-fd06-039c-bf8d-c03afaab6dcc
 29 52ba5823-38fc-1af9-8e66-56c0f1ca0160

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 81051088130134711407187121301. Exactly this sequence comes out of new Random(567).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 192 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 29; the post has N = 29 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results