A858DE45F56D9BC9 archive

201209241307 10dlaj

explained decrypted filler

3DES(name+title) ECB, 34 GUIDs, seed 325

Metadata

Post ID
10dlaj
Title
201209241307 → 2012-09-24 13:07 on A858's clock
Posted (UTC)
2012-09-24 04:07:52
Timezone
UTC+9 · title 13:07 against posted 04:07 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,192 hex characters · 1,096 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241307) = 2b645c3fa94a59efbbace32460604c21 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
34
Filler GUID seed
new Random(325).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
203 · predicted N = 34 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,192 hex characters = 1,096 bytes = 137 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241307 (name+title). Key = MD5(password) = 2b645c3fa94a59efbbace32460604c21, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 34 GUIDs as hex (shown below).

Decrypted: GUID list

  1 36475e9e-64a4-4c53-a7df-0de91bc59a48
  2 2f0f4cbb-ff59-1ae4-a85f-d48c8d40520b
  3 3797fc85-ae6f-8c2b-9235-ea2a3e7b34ea
  4 463bb6ac-3eac-87c1-a994-09387fde0d58
  5 74681b65-6e52-8dca-8b03-ba7ce1f0a2a0
  6 57ccfc55-aca5-55f1-9dcb-18147fa5fc3b
  7 d174e93f-7504-4f52-ae10-34123240182a
  8 c5f2b65c-0d25-48ed-a192-b3c4af0803e3
  9 72b63650-65d3-1020-8c68-b66da63a2b1b
 10 fbf755a6-6809-1b41-9ce9-cbea50ece45a
 11 6b401108-bb79-6851-acc1-d9a2e699dc42
 12 d80dbf52-7bad-1ce8-9c32-e68b38d89320
 13 db8271fb-8039-0091-8bd0-071f664c1987
 14 5a7bf68a-b435-4311-bdb9-df076811fba0
 15 99f1c938-b2a7-4686-94bb-4b8f301a9f37
 16 74d54fcc-a0e9-8278-a11d-54f2c991f990
 17 86443714-12fc-466b-9e26-ad75fef650a6
 18 a7bf64af-c55a-45cf-a1da-c0d477cac638
 19 e3f0db10-8161-4e07-81d1-9d6b16020465
 20 d6894c21-d11e-10aa-b62d-2a076adc18a6
 21 d39eb450-5911-8853-bf33-e40fc01aab80
 22 a058c501-0cf1-56e1-8861-73c7c9fd4372
 23 42fe0956-6721-8505-953b-bc831edad046
 24 f2b45b45-ef32-5648-b77a-61288a405ccb
 25 446d2714-430f-49f6-939c-e791bf9eae26
 26 a379baae-b075-5517-bb14-989f4bbd3143
 27 2d21df54-138d-374a-a8ed-42738777e8ec
 28 e51538af-0383-0b20-b7ff-7f76116499fc
 29 34a56c2c-a59a-2ec8-b5ad-1e6010cc719c
 30 3ac0917b-b7dd-7a6a-b17a-6b27021147fb
 31 922c9ae3-d71e-1326-ab8f-575cf1c15780
 32 540eeeef-24f6-0877-b93a-1d43da86a51d
 33 0b59d513-c9f5-89ba-8284-cfb710bb909f
 34 a30b4df3-7ffb-17c5-8d48-1400af066045

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4188854411610448444185854530271081. Exactly this sequence comes out of new Random(325).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 203 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 34; the post has N = 34 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results