A858DE45F56D9BC9 archive

201209241412 10ej57

explained decrypted filler

3DES(name+title) ECB, 42 GUIDs, seed 957

Metadata

Post ID
10ej57
Title
201209241412 → 2012-09-24 14:12 on A858's clock
Posted (UTC)
2012-09-24 18:12:11
Timezone
UTC−4 · title 14:12 against posted 18:12 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,704 hex characters · 1,352 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241412) = 901427ef23517999c75703fe811008e4 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
42
Filler GUID seed
new Random(957).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
237 · predicted N = 42 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,704 hex characters = 1,352 bytes = 169 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241412 (name+title). Key = MD5(password) = 901427ef23517999c75703fe811008e4, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 42 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d64b4cd0-d4cc-6831-97a6-252312ecd8c6
  2 037d842e-0560-5a05-beba-588a8aaf2b85
  3 da0fe70f-cd15-6e7f-b7f3-a1ed5768e360
  4 836a0864-b2a8-758a-a969-6019fb4d785f
  5 8afd9e88-bb65-289c-80d0-48667d699b70
  6 099176dd-e779-76a5-bdb5-7c2bf226bcb9
  7 7cccc965-8318-6606-91ca-ac018778fe27
  8 989f2c21-32c2-403f-9453-d7047da81e0b
  9 115197a7-45a0-39e0-8260-253080faa9a6
 10 60aa017d-c1cd-1586-8afb-6c6362000f9b
 11 5cd2c634-dbdd-3666-b796-5a96ab3e0147
 12 7345e9f6-50fc-53f6-8b53-5815d0d37373
 13 1625b411-bf1c-49bb-be02-909427b0dba0
 14 538a38a0-f2ea-3383-997d-8450f22b6ac7
 15 a0345e81-d344-795d-a545-298a2deabf14
 16 53d7f205-2edc-631a-b709-0eb0c1801750
 17 e043ae2e-58d8-1909-9f75-7e5e7c58d659
 18 2d42f02f-3afd-34bb-90d8-cf7c09eb4f78
 19 dfb91bd0-c97d-5763-8521-e3da22376649
 20 feed7d49-5615-7e9c-91a0-963087609858
 21 c5565769-917b-8a3d-86e1-68ba49508316
 22 964d2e8f-9eea-50dd-b77d-5922695a35f3
 23 9526f702-c2c0-6b7d-8274-c1cbee64b6d1
 24 8c9cb536-911c-3a10-9b54-7eafabbb0922
 25 c03eb700-c7c2-4e1c-83e6-7fe5e5554fae
 26 5ab7117b-9a9a-0625-a528-e6e53bd3714b
 27 adfefcdf-5297-670e-8e75-9815f9276c59
 28 fca5262f-a6c9-542a-a47e-81012bd4791c
 29 b091f3ae-1d78-7f00-99f8-61d65c544934
 30 40e3eeb0-e13d-7052-bbc9-ae56ae64a53c
 31 aae197f1-f262-4e5d-910f-3a0a74e5190e
 32 ba58e8ca-429c-4d20-9788-947f1781c423
 33 39027138-188f-16d2-8653-f1b051da1118
 34 ce938ec6-5ff6-88e6-b13c-4d93d8bd0244
 35 20155dbd-a027-72ee-b7c0-41dece3eb969
 36 16f3ceb1-9ac2-2329-b0cf-29b7d506b49d
 37 433c42b6-245e-6e36-b743-5f0e02b80e96
 38 89c5e7bd-9ffc-571c-baa1-94e188a6f6b5
 39 1963c364-01f6-2068-9f43-a5f1d0366734
 40 b750b24f-0f7b-392b-a0a4-74f3d7cb01c8
 41 1eaab263-a99c-1089-ac97-99a16310d676
 42 53fa4d0a-708e-5ff3-9e63-864091625933

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 656727643135437613578563406577441872652315. Exactly this sequence comes out of new Random(957).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 237 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 42; the post has N = 42 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results