A858DE45F56D9BC9 archive

201209241321 10dly6

explained decrypted filler

3DES(name+title) ECB, 33 GUIDs, seed 142

Metadata

Post ID
10dly6
Title
201209241321 → 2012-09-24 13:21 on A858's clock
Posted (UTC)
2012-09-24 04:21:02
Timezone
UTC+9 · title 13:21 against posted 04:21 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241321) = f937dc467758a439f10a12038f80e704 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
33
Filler GUID seed
new Random(142).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
216 · predicted N = 33 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241321 (name+title). Key = MD5(password) = f937dc467758a439f10a12038f80e704, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 fad2f1d9-ec2e-8ebb-92ae-285411d192c9
  2 1516eb66-0f6a-4145-a51f-dabbb9e06398
  3 cf0d4bbb-6b35-0542-9f28-3881075d6e00
  4 08c3c86f-da60-7608-8773-451967e54d23
  5 7ce976fb-a9ec-28d2-aea2-23a88d4d4e30
  6 4eb86ced-8625-5bb1-9c35-5b59a5384b64
  7 1bc34c99-c5f0-4a64-ae1e-785d244ad7d0
  8 6056c53e-3d04-6e29-9b4c-2f2e1fd31892
  9 79095035-0a0f-4a5e-9c3a-3fb26783c40c
 10 41d50460-12a8-50af-bbec-7b52013959de
 11 c20bae69-4251-8e4b-afb0-a8d10b6ba456
 12 8a82680c-63c8-24f8-8d5d-0aa8d6fc9383
 13 f1f2d3da-c9da-2dbd-bed5-1dec0ef992dc
 14 9574fa91-7deb-3863-b9a8-d871b1117ed9
 15 1ee89d93-a640-3fef-b065-e1642d6f70e7
 16 6c7f016c-5771-60a6-9f46-b84f4276a26e
 17 4674166a-7cd0-46d3-85dd-8d0f8adb4d7f
 18 d3770705-e49a-0b43-b345-4f5bf344bae7
 19 1c727a31-ebf3-4ee1-8efd-3cc030f336cb
 20 e074dd5f-4ef8-2876-a830-1f6bfc019b20
 21 c9ed6239-c9e1-6240-b601-1528688aefba
 22 4ba47b37-ac6c-6177-86ca-038c4863e2b4
 23 a2cf0bd4-68de-8505-af51-3b3d13e1e05f
 24 c7733204-edfb-5dcc-a8de-841adefe8b40
 25 989d91eb-df2f-5bac-bafd-3f15b4dbbd96
 26 d429bf0b-4209-7041-8491-678581cad73b
 27 c6d6e6b5-392d-0ec1-bbbc-c7c09252e634
 28 0d6e0adf-b888-62bd-84f8-5e443c26ff48
 29 0c5168d0-44a2-67b6-ac48-4f1cc7610354
 30 3b3c9a39-0634-336f-b89d-946e03daef58
 31 f84f5935-3c90-5fb2-925e-f7148cc2a862
 32 258542cf-b526-7f38-bc55-3436e5b811fb
 33 437452a1-d2e0-3d09-8a76-fef9c43b37fd

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 840725464582233640426685570663573. Exactly this sequence comes out of new Random(142).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 216 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results