A858DE45F56D9BC9 archive

201209241433 10ekhz

explained decrypted filler

3DES(name+title) ECB, 29 GUIDs, seed 474

Metadata

Post ID
10ekhz
Title
201209241433 → 2012-09-24 14:33 on A858's clock
Posted (UTC)
2012-09-24 18:33:34
Timezone
UTC−4 · title 14:33 against posted 18:33 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,872 hex characters · 936 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241433) = 56734e16fe526029e3b5ddb3afe4bb5c (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
29
Filler GUID seed
new Random(474).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
258 · predicted N = 29 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,872 hex characters = 936 bytes = 117 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241433 (name+title). Key = MD5(password) = 56734e16fe526029e3b5ddb3afe4bb5c, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 29 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d6a31723-cfe3-351a-a2d6-89a81e0372f5
  2 5ec1c009-3e2c-8d3b-b711-ce2ec737e8e4
  3 5de60389-c655-05d2-9a18-28365ad72ede
  4 6420735e-e09d-6b6f-a0ba-057a0e1cd1f6
  5 6d3c84a1-0652-1c06-8467-35bc10aa803f
  6 610e2e2d-d3a9-722d-8747-46b278a2c579
  7 4bdff435-2605-262c-b934-92c061c834fc
  8 ddef3d64-d84f-2464-84d7-96d2d966dddb
  9 7cc80a89-3bee-5aeb-bafc-e1c37293ecf2
 10 b839ee00-8201-0919-876f-4b4066dbe426
 11 1fa9c77f-2ab9-45ca-9676-7d3d6bbf066e
 12 2fa44ac8-6fa9-4ac2-90b9-4e01704447b9
 13 cd70d56e-2cd3-402b-b4e9-c7acea01bc31
 14 f37e1eaf-c72f-03cb-84ea-4de07fbde95d
 15 3fc4fea3-0cbb-6cb8-ba98-eccd03c529ad
 16 46594476-bc18-0c6e-8e7e-1fd0b93e2019
 17 3ac59ca0-fea3-1fd6-8afd-180e868f5c52
 18 087884a0-ced2-7f17-83a1-7bee3df21408
 19 31064fae-f463-4c19-8e42-16ad0139f70b
 20 eab17c14-440e-7221-8e30-b8c314c300b7
 21 00bab304-e774-7f5f-ad0d-4185ff4e4a76
 22 4a0baede-1d4f-1dc1-a261-d0f9cb7bed5f
 23 a764ea13-e11b-0c9b-9a0c-b81737bdeb9a
 24 9268e34b-d49f-584d-96dc-d29ee86cacc0
 25 4bd3652e-baa3-16e3-bb5e-460328a58ecd
 26 44fac5bc-46b6-38bf-aafb-5824e74aed47
 27 c60d070a-7df5-43ad-a5fc-cad522eec901
 28 b50f5b87-4a10-3c2d-b74a-14faa67b6775
 29 987366eb-9e51-4617-9f90-b73e2e6d6e9b

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 38061722504440601747710513434. Exactly this sequence comes out of new Random(474).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 258 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 29; the post has N = 29 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results