A858DE45F56D9BC9 archive

201209241257 10dkp6

explained decrypted filler

3DES(name+title) ECB, 31 GUIDs, seed 4

Metadata

Post ID
10dkp6
Title
201209241257 → 2012-09-24 12:57 on A858's clock
Posted (UTC)
2012-09-24 03:57:45
Timezone
UTC+9 · title 12:57 against posted 03:57 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,000 hex characters · 1,000 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241257) = d1fc2821a70d6bd78dae978112c4ec1b (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
31
Filler GUID seed
new Random(4).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
193 · predicted N = 31 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,000 hex characters = 1,000 bytes = 125 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241257 (name+title). Key = MD5(password) = d1fc2821a70d6bd78dae978112c4ec1b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 31 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b0dfa925-49dc-7450-832c-7e7bc7443d5d
  2 d568d28c-1444-8c53-939a-df0c127308cf
  3 53b445fd-1e4b-5d82-a952-360660a9f87c
  4 cc30ac68-ef83-3978-8715-b15e8d21846b
  5 f9a4e8ae-5a35-0dd3-a6a8-ec4c7cda5326
  6 effc5fcf-4a6f-05e1-8bab-5398e9a65d19
  7 1bb2fcb5-a279-696f-b8f0-b283d2bf258e
  8 31f6e15f-be9c-406f-839d-1cb96c38b5ec
  9 c763c99b-c4c3-4b4d-b937-accceb0f3a63
 10 5516e506-2b18-62e5-bacb-62221fc81b17
 11 4c7c7246-20a0-2ecb-b103-bc94d30bafde
 12 14b1c488-0f70-50cd-8d33-4dd1825e1e4e
 13 4a5710bf-6b8a-3f4e-9607-dcecaa81fe89
 14 91d231b8-acfc-4411-9718-6ba91f639603
 15 e96b61ca-f965-775b-afca-fbd172578c2f
 16 34372013-d8f1-48e3-abed-8b7c96edaabe
 17 aa091d30-1f8d-4b7f-a836-ae7f87db7d86
 18 11158c00-7cc8-4112-80d0-39470e245f10
 19 8bf4b852-6e44-7d83-a640-ffd055343850
 20 cb1420eb-ccc9-7763-8acb-22bebb5a539e
 21 ab95b25d-9d5d-3979-90da-49eb280cd50a
 22 caf1c485-c1d8-7591-b0ba-63bac4aa150a
 23 0e096262-f42c-6f3e-85c8-fd9f8a9386d5
 24 e24eaba7-03ca-322c-b57f-11987983d09e
 25 d4410c98-e6fc-029d-a78b-d30d879cef29
 26 d92b9f6e-1a9a-0e98-a591-7945da2e6b3f
 27 48a873ff-451a-3346-b11a-44831d494abf
 28 5bbdb28c-d37b-119f-aaf2-953c6a39d6bb
 29 5454d01a-7f96-58d3-a364-5b66a98cd1d0
 30 b8f40628-1ad9-2598-8968-271dc2cf1fd9
 31 5831784c-f883-53fe-9cf0-c83a942db093

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7853006446253474447737630031525. Exactly this sequence comes out of new Random(4).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 193 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 31; the post has N = 31 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results