A858DE45F56D9BC9 archive

201209241405 10eiqg

explained decrypted filler

3DES(name+title) ECB, 27 GUIDs, seed 218

Metadata

Post ID
10eiqg
Title
201209241405 → 2012-09-24 14:05 on A858's clock
Posted (UTC)
2012-09-24 18:05:05
Timezone
UTC−4 · title 14:05 against posted 18:05 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,744 hex characters · 872 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241405) = 4ee604e7c207321c860bd9c9b6ce7753 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
27
Filler GUID seed
new Random(218).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
230 · predicted N = 27 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,744 hex characters = 872 bytes = 109 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241405 (name+title). Key = MD5(password) = 4ee604e7c207321c860bd9c9b6ce7753, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 27 GUIDs as hex (shown below).

Decrypted: GUID list

  1 cc865888-3d59-5bf7-8a6a-02d79e1a1448
  2 fc889552-3b6d-77f5-8ad6-fa710a4e3c66
  3 19ca07be-299f-1077-a49d-ca6e73a281e9
  4 637c7ba0-fafa-04ef-b572-8b26a03113b2
  5 672c8430-d5a6-58d5-bd5d-98f33c0391f1
  6 e7c39ff7-a486-0df0-96d1-0788ce5199ba
  7 b839b2ba-48de-53ae-af80-5cb8b221656e
  8 17e96c99-a408-721f-892b-1d4a40fc7b1e
  9 58560cae-170e-8fee-85dd-7ec62051e831
 10 1dd83e41-44ad-58fa-993a-6a51fbcde95a
 11 9065aef2-1f43-8777-9b2f-0c45b5d651a2
 12 210dd7d7-434c-52d8-b7e4-4987af9b481b
 13 db509392-7606-4528-a618-3d9248434aca
 14 46ff4cf4-caa4-7336-8045-5aecf86ef426
 15 980564e9-f008-543a-88b6-d03a01a78e27
 16 0b6f4f5e-a789-14a1-bf6f-3561bd45fc65
 17 673fc903-65e1-49d4-a9cf-1f9f0c1dd5dc
 18 c50c79ba-f7bf-1587-96ba-a378beb7f010
 19 57897b1b-bee9-5879-8fe7-aadad201970f
 20 c54c386a-db70-66c4-bc27-78fbb0af9c43
 21 88bb8650-ca52-752c-b45d-9bc650a86767
 22 85f8d71c-5aa7-24bf-8203-06165fff08b4
 23 a2d3e0b9-dc6a-789a-9b54-0339a2b5b7c9
 24 b2376cd3-8ca1-126d-8153-a3a23f27126c
 25 189725c7-7f21-0110-b29b-6bdfe3464703
 26 20c255e9-909d-6e41-8a0f-c81bfde21a35
 27 1fc7f63b-96ec-38ae-b5ea-788e1b312df6

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 571050578585475141567271063. Exactly this sequence comes out of new Random(218).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 230 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 27; the post has N = 27 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results