A858DE45F56D9BC9 archive

201209241415 10ejc5

explained decrypted filler

3DES(name+title) ECB, 41 GUIDs, seed 201

Metadata

Post ID
10ejc5
Title
201209241415 → 2012-09-24 14:15 on A858's clock
Posted (UTC)
2012-09-24 18:15:14
Timezone
UTC−4 · title 14:15 against posted 18:15 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,640 hex characters · 1,320 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241415) = 521dddd195a160f9287c09039d9cc573 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
41
Filler GUID seed
new Random(201).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
240 · predicted N = 41 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,640 hex characters = 1,320 bytes = 165 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241415 (name+title). Key = MD5(password) = 521dddd195a160f9287c09039d9cc573, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 41 GUIDs as hex (shown below).

Decrypted: GUID list

  1 f1f16ff2-a2c6-69d2-aca2-80cb331ab45b
  2 8a77bef9-0f15-7e94-b717-ed0f56417fd4
  3 d349cb76-06c4-284f-ac6a-3f56dc42bb0e
  4 9e365b6f-80fc-4ad3-b439-ab0c925b1248
  5 ccb8f34e-e3b9-8a1a-a74f-0824bd6a4ca2
  6 60f6d7f8-649c-124a-8104-fc64aa85e0c5
  7 243acba5-de93-8014-871b-06690f15e284
  8 4b98aeae-081f-2ab7-acb0-b732778a3c0c
  9 b0169b58-d0d6-7754-b6a1-71eac1e35309
 10 929454f1-2866-3134-8c7e-f54c81549700
 11 3576c59c-0e4e-38f6-8e87-f69cc9e0063e
 12 6c663893-8d35-30f8-b94f-43171125aa2b
 13 934334b0-8faa-70b1-ad06-8d895ff6ad7a
 14 f5d1b8d7-d6f2-0426-bcd3-6811ed5848b9
 15 1ffdcf5a-f97a-68e8-af9b-bc2d36fb3fb5
 16 cb4fe596-cbc2-5f35-a918-7b14b69f19b6
 17 a35f6a5b-a461-336a-a37e-257dfc5c5069
 18 7bb12202-ca38-53c1-a9cd-3356544fc89e
 19 ddc1fbec-322c-1a29-b8cc-64db9c4c76f7
 20 0a2fec0a-f0a8-1cc1-82d3-13ba7bbad8f5
 21 11edaa38-c929-48b6-8ba4-27d8bb891ce9
 22 9e60f971-35e8-1d8c-8459-412fd77319ee
 23 bd6ccad6-c494-8859-bbad-798681f76bd4
 24 be4d3c99-60b2-25c9-a280-7f62cf736d5c
 25 331ed30d-ae6f-3b24-9029-be5da1d5788b
 26 f055631a-ef4e-79e6-9442-b4ecc1af5171
 27 9345c9ba-3416-6aae-8d59-84c0a9676167
 28 67aa7aca-e8f6-2636-9f3c-ee2c884a3c0e
 29 e50b8a20-e758-00c2-a306-d788b8183209
 30 4bdca527-f655-8677-b456-5790abc516d2
 31 fcd993d4-82a5-37f1-bd9e-5afe6263e246
 32 34c79425-306c-32dc-a1c3-51a469129166
 33 45de087e-7c7c-1c0f-bcd5-70af3a1a50bd
 34 8ad82120-d48a-0ba9-870a-70cbbac40139
 35 04705396-6aa9-7674-a5ad-fc00d8610e53
 36 4cd32e3e-67e7-4011-b2fb-d586357bfeb7
 37 d3318a16-b675-4f60-923f-313acdfd472b
 38 73d621ef-71f8-3f03-b46c-2f9a75b67630
 39 aacffc6e-8516-6b8b-9cd1-5cf95650d4e4
 40 fb7cded4-acd0-0b8f-879c-a79aa6b4ea40
 41 64d0ca9a-2703-7e85-9535-8cb8670495cd

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 67248182733370653511418237620833107443607. Exactly this sequence comes out of new Random(201).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 240 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 41; the post has N = 41 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results