A858DE45F56D9BC9 archive

201209241429 10ek81

explained decrypted filler

3DES(name+title) ECB, 35 GUIDs, seed 402

Metadata

Post ID
10ek81
Title
201209241429 → 2012-09-24 14:29 on A858's clock
Posted (UTC)
2012-09-24 18:29:31
Timezone
UTC−4 · title 14:29 against posted 18:29 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,256 hex characters · 1,128 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241429) = 77bae71ba388cda6b263f1768325ea9b (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
35
Filler GUID seed
new Random(402).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
254 · predicted N = 35 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,256 hex characters = 1,128 bytes = 141 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241429 (name+title). Key = MD5(password) = 77bae71ba388cda6b263f1768325ea9b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 35 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0c172153-76e7-6df6-90c3-bd7462624baf
  2 e0c9062f-38fe-67de-bc99-e127beab070a
  3 2d92c732-5b3b-6bc6-94d1-f53b079490b5
  4 0364917d-4a0b-317f-839e-3d878bcae3ba
  5 4e73e9fe-c198-6a1c-b231-431474af390d
  6 afe2708c-0458-7883-9621-2a47b067b3e0
  7 a3fdfef9-39ba-0410-a50e-608159f35bd7
  8 0d80f04f-7c18-1bac-a102-9aac2f9584ff
  9 f0f2a539-037b-6285-b480-a9fa67ff466e
 10 5719f770-de72-40e8-a3a7-1735426a2f26
 11 a9dfdb83-67e3-45a2-9ae4-4c64b4e01255
 12 76c55a2b-e32a-27a0-9ae1-0c956960e5c1
 13 b72f5b1f-27cf-89a8-8776-ec924b299e5a
 14 d77d6741-64b3-5b74-90fc-a19e4328172a
 15 aa0a0443-735e-385e-87d4-6ffabedba4ca
 16 a1754989-202f-0981-aa62-3ad88b398e6e
 17 7f803e94-2d9c-74ab-84d4-3d0be4a2348d
 18 0452a196-0ba2-257e-b0e1-83af3bf801de
 19 896dc9cf-72c0-5510-98dc-e9db32a04493
 20 9313c9e0-7f51-80a0-9637-46107fa24373
 21 ada5dc49-c476-2220-8b5a-429cc8b92bca
 22 3a2b0509-018d-454c-97fe-67511d2bc4f8
 23 7857f264-adc6-87fe-b961-a9f9f16e280f
 24 5f6930a7-07ea-4c32-86b2-6bdf73e1570f
 25 7b2e570c-b4d7-0174-9b03-693ea93c1519
 26 66fbc4ea-6b8e-09e4-b354-91a4813da1da
 27 025feb0b-2f33-57be-842c-acf13bb3998f
 28 33c3e79d-ae2c-64e3-92c4-7aa088d85065
 29 ef7ad55d-4b66-5035-9ee1-4da1b73f4c82
 30 e21d07be-4f60-775c-b7db-f514d69e2089
 31 739513e3-8700-5fdf-8a6e-d4bbc28cab83
 32 132fdf0d-ecc0-3bcf-a5d5-e4b0d1832ec7
 33 0441db6b-b2c5-84c5-b49e-97773fd72676
 34 b08500c3-1dbf-034c-b53e-eaf3c56435e2
 35 2bfc8d58-44a5-0206-9e21-a03e2080b97d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 66636701644285307258248400565753800. Exactly this sequence comes out of new Random(402).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 254 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 35; the post has N = 35 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results