A858DE45F56D9BC9 archive

201209241425 10ejyq

explained decrypted filler

3DES(name+title) ECB, 26 GUIDs, seed 619

Metadata

Post ID
10ejyq
Title
201209241425 → 2012-09-24 14:25 on A858's clock
Posted (UTC)
2012-09-24 18:25:23
Timezone
UTC−4 · title 14:25 against posted 18:25 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,680 hex characters · 840 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241425) = a2e2d9c5880dac22e64cd2fc830a9c00 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
26
Filler GUID seed
new Random(619).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
250 · predicted N = 26 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,680 hex characters = 840 bytes = 105 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241425 (name+title). Key = MD5(password) = a2e2d9c5880dac22e64cd2fc830a9c00, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 26 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e1a0e9de-6eac-0bd5-8eab-6ed95bc2d537
  2 87600f99-8f4b-31c1-bd10-d4c6add77423
  3 e835539d-7ae2-3bcc-80b0-ab295d5f2fff
  4 7f1fe0b9-938c-658e-b206-f76b07cf08f9
  5 14d752a8-4e51-6b13-8b3f-d1d661dd1c99
  6 9c1586ff-419a-41a7-8f28-fa9fb2abcae5
  7 0ac0a5a6-e179-2fa2-9879-7cca5fe6c64e
  8 006b137d-1fff-8163-8760-ef92ec56038f
  9 40cd085f-5594-594a-8f6d-95a8e310efe4
 10 ae2bc35f-3039-42a9-891f-8bbcf43095e0
 11 6579faab-ce2c-2905-bd1e-d1b20048cce2
 12 bf9b175f-b457-690b-8e14-88bd0eb17ad9
 13 0ec23960-1732-1cbb-845a-8a6962f08461
 14 fa22b022-593a-4318-93d4-b9f55fa7616b
 15 47e5d029-f2a5-2956-9a3c-3deff8ab7716
 16 0b8a8c92-d62b-56cb-93e5-3c431534c4c9
 17 83ef82f2-0af4-0f49-aa8d-05d8c1d8ace8
 18 0918f1cd-ea52-62ad-856d-bfe27aba305d
 19 6a14b54b-5476-3379-859e-ebbc68a5e78d
 20 cc3806eb-ff05-858e-95fe-78534ad8220a
 21 a11697e8-6277-0959-878a-f042391e4e59
 22 10bfc1e7-1a5e-63bf-9c6d-9dadf8daf8f7
 23 19c1634f-1bad-5d40-93c2-b7e0730d4206
 24 665aea36-80a8-2000-837a-7ef7c023092c
 25 031fec0e-d98f-37d6-9e59-01246814393b
 26 1b777c73-aeef-54a1-8550-0c3c4161a5bc

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 03366428542614250638065235. Exactly this sequence comes out of new Random(619).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 250 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 26; the post has N = 26 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results