A858DE45F56D9BC9 archive

201209241314 10dlmc

explained decrypted filler

3DES(name+title) ECB, 37 GUIDs, seed 568

Metadata

Post ID
10dlmc
Title
201209241314 → 2012-09-24 13:14 on A858's clock
Posted (UTC)
2012-09-24 04:14:57
Timezone
UTC+9 · title 13:14 against posted 04:14 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,384 hex characters · 1,192 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241314) = ee233ad58a30db3ae7a9bed6eec1f253 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
37
Filler GUID seed
new Random(568).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
210 · predicted N = 37 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,384 hex characters = 1,192 bytes = 149 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241314 (name+title). Key = MD5(password) = ee233ad58a30db3ae7a9bed6eec1f253, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 37 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3a00ad24-6725-4f4b-9648-5d3b00b2a242
  2 5330bc47-615e-49b4-95c2-6deac93466dc
  3 a38bc3dd-7a48-797d-93be-9a50b93cbfd1
  4 48fcf3dd-b6a0-7772-b4ca-d12970649af8
  5 bd55c26b-80dd-53b3-92a8-33c73ccf612a
  6 8b1a1641-829b-8869-ac5f-89050dfaaee7
  7 b39441d9-fc81-33c8-9ec8-23cf9254fa70
  8 604aa106-579f-3fed-baff-8ed0f5c5ee14
  9 34a98acf-3fc7-25e7-a28a-780c9e654891
 10 a983fbe8-a341-6781-bffb-e9febb218492
 11 2499cf62-c252-6e6d-854f-37088b60b16c
 12 cf3a9c48-7cd9-8116-8f4d-b47ae08d0ed4
 13 8ab3f9de-225e-0c64-bf3c-32bf168857f9
 14 006c0fde-2292-8387-a8a2-9d5a694aff74
 15 b6f30151-d323-52ac-8df2-e97fbe9d9c0a
 16 da29a274-e529-6ef7-b4ba-e724116d0b05
 17 76c34354-9a35-5f5d-a306-d85d24673b8f
 18 7d107b92-b8db-10fb-97ca-d524474d5434
 19 763134e3-890a-06cd-aaae-3a87a1804f6e
 20 e74d82dd-d401-209e-ad9f-a6cc6e41ddcb
 21 f15f2763-0c0e-2403-b1cf-e77d937f5d73
 22 81af4152-e47b-1722-9daf-407f37bf632c
 23 af74cfe8-ed2f-84de-8ac5-769e845f0a38
 24 757286e8-d5d7-4662-9e8f-09ebd1fba578
 25 92443556-244d-3070-bab9-c07783e5851e
 26 316addfb-7a6a-7125-b7b6-71ee2042b6d3
 27 0e0507bd-c541-2a7a-a64e-88549b448168
 28 c5f14ad4-e3e1-5c54-bd73-ebd525a208ef
 29 1c668b9d-0700-3a01-ac79-0c2b31b8f18b
 30 bf5181b3-36fe-489e-9cee-ef08cf0fbd52
 31 02b83927-3785-74a4-9e58-213cc8cf3239
 32 0217f196-a2d2-0bab-8f15-246ca8be2c55
 33 f75677a1-843e-629c-8ddc-776c24eb8062
 34 ffb22b81-26c0-2096-9d28-61f7a5778dbe
 35 993b2767-3029-86b0-8fc1-6cdec6793648
 36 05a06001-bd60-3b9e-b4b0-b8ee22874356
 37 a424fa89-1574-4282-baa9-e34a8ad0e804

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4477583326680856510221843725347062834. Exactly this sequence comes out of new Random(568).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 210 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 37; the post has N = 37 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results