A858DE45F56D9BC9 archive

201209241430 10ekaf

explained decrypted filler

3DES(name+title) ECB, 34 GUIDs, seed 275

Metadata

Post ID
10ekaf
Title
201209241430 → 2012-09-24 14:30 on A858's clock
Posted (UTC)
2012-09-24 18:30:31
Timezone
UTC−4 · title 14:30 against posted 18:30 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,192 hex characters · 1,096 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241430) = 651c4e75161127bae3a238dc54921f88 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
34
Filler GUID seed
new Random(275).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
255 · predicted N = 34 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,192 hex characters = 1,096 bytes = 137 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241430 (name+title). Key = MD5(password) = 651c4e75161127bae3a238dc54921f88, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 34 GUIDs as hex (shown below).

Decrypted: GUID list

  1 45b66117-0d28-3845-a021-db023f21594c
  2 f9ba010a-c7cf-48d2-a0df-c35e04c7a275
  3 e6f6ede0-82a9-82e5-b93d-acb08035b367
  4 e81bfbb9-6c1a-2ae7-b0b9-93043d3c012b
  5 53d337f8-d833-3a6b-98eb-fcf119ed59dc
  6 031ba93f-6bbf-7e2b-88f8-a85115d30427
  7 cfecd67b-ee6d-1522-8245-b02efaae0133
  8 29cced92-705f-3d8d-8fc5-d174036ba94b
  9 dc4c5220-752d-800c-8cc3-3deecc6c66fc
 10 aa8db820-7cd1-6c35-8145-6034522f11c2
 11 33ddc49d-9e3f-8d89-92fa-224457c84f79
 12 bd180067-6a23-152c-b541-35af488667ba
 13 18f0a717-843d-6856-9b2b-118c5c52aa17
 14 b05abbcd-fe5d-4708-a3d9-caec7c324f8f
 15 4aca1413-d5fd-43a7-9b93-dcb4e54f7923
 16 04857a88-2fb3-6996-8879-38e1ad4ed01e
 17 f4477705-7728-4f83-92cd-90358f60c1b0
 18 39974712-ab3a-4a17-8558-b38919a39c1e
 19 b08b00f7-51cb-1bdf-ae33-9b6090b1a950
 20 60cceba7-ce09-7a8c-b36f-186280645697
 21 3614f465-8965-332b-b558-4cba12f24f6a
 22 5e30905b-6dac-2759-8a9c-dc92984a0d5c
 23 33f086b5-4a0b-433a-bf69-3d294cfc23e9
 24 b3703e45-6619-0cbf-8ace-7bbd2927d862
 25 fce0d417-8255-5521-b645-40f44ab8dff7
 26 009a7f34-e792-3b20-9017-be8639493edc
 27 02d06f6c-8f96-3731-9623-f408f3079c2e
 28 2a0308c1-d347-02cd-8cf2-67e0989e492e
 29 f36361b5-4c24-4902-9484-f2600fdbc6ed
 30 6807eb58-4d9e-44a2-b0ed-b3ae02f4de0e
 31 d5be2f6f-dc6b-6ed6-8325-8b1e8f3f9e36
 32 bb8c4e79-a99b-8738-a5ef-06ed7f3ccddc
 33 56035989-eded-7f66-aaa6-ff9c396c5161
 34 acf138cb-3b08-7d8e-b534-0c90fe7b390f

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3482371386816446441732405330446877. Exactly this sequence comes out of new Random(275).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 255 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 34; the post has N = 34 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results