A858DE45F56D9BC9 archive

201209241315 10dlo8

explained decrypted filler

3DES(name+title) ECB, 31 GUIDs, seed 146

Metadata

Post ID
10dlo8
Title
201209241315 → 2012-09-24 13:15 on A858's clock
Posted (UTC)
2012-09-24 04:15:58
Timezone
UTC+9 · title 13:15 against posted 04:15 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,000 hex characters · 1,000 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241315) = 69a497715d63717cc8acdb35e81a5600 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
31
Filler GUID seed
new Random(146).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
211 · predicted N = 31 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,000 hex characters = 1,000 bytes = 125 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241315 (name+title). Key = MD5(password) = 69a497715d63717cc8acdb35e81a5600, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 31 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ed683b91-2f87-06de-8a2b-65fc83775a7c
  2 8703fca3-657d-5ddb-ad79-21476c31eab3
  3 7a5bfa7b-8b79-7954-8b0c-3c2a451f999f
  4 e0982822-b3c0-6b57-a5e7-433f9ad8039e
  5 17ec933f-d9ee-1e6b-a433-f2c61ada2c5e
  6 e3cc5995-0fa8-1e96-a43d-f8380a05505e
  7 11df0f78-d22a-2af0-91f3-db8bc1215b85
  8 6a894c04-0717-6407-a7f2-9b88a371a5ab
  9 7fb7934a-38ee-0eed-a5ad-a4a523252a00
 10 b707296e-a4b1-142c-9111-49bd423276bf
 11 1e9c1e8c-0c45-7694-a1d4-9f33f83c2eeb
 12 6b3fb249-b397-4ba1-bb32-192598cfe899
 13 3d3267a2-51a3-0a38-bbef-28a332330087
 14 fd24eab7-f9bb-3147-959d-a427c235df4b
 15 f67e7fe4-43b6-1390-a71c-b60d85a6e257
 16 d69e1c31-a018-1939-b42f-85a099bf7c17
 17 cb960940-3c09-25ab-b6bd-0fa9c2f390e3
 18 d8697c60-ba6c-40ba-8224-ab62e731f1b1
 19 4a595017-94ba-5c34-becf-bcf140718687
 20 323dc4b3-099f-7fdb-955f-0c921e063e2a
 21 79eee66e-cf2e-1740-9c7f-e8d21c2b51fd
 22 6ffd853f-6a5b-66e9-b734-05e7c4a89ef8
 23 36f8c5cd-8c8d-5363-9953-d8031aaaf993
 24 1fe32487-582e-064f-b2d1-c62384aa28d5
 25 82009420-4a50-0c5b-96de-33d99aa8dc84
 26 5231e943-85a1-3e72-8f89-59908291056b
 27 256d5414-64d7-47ce-88d7-0af73b9d3348
 28 8e0ca8b3-fead-1f93-bd63-7f340faf0c0f
 29 2ddef055-f6cc-753b-9185-1be7fb129385
 30 04d98bbd-565f-5a7f-8978-d1990bfeba2d
 31 2c9e4854-c95c-0de7-8cc2-f93b30b800e0

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 0576112601740311245716500341750. Exactly this sequence comes out of new Random(146).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 211 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 31; the post has N = 31 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results