A858DE45F56D9BC9 archive

201209241435 10ekmv

explained decrypted filler

3DES(name+title) ECB, 38 GUIDs, seed 486

Metadata

Post ID
10ekmv
Title
201209241435 → 2012-09-24 14:35 on A858's clock
Posted (UTC)
2012-09-24 18:35:35
Timezone
UTC−4 · title 14:35 against posted 18:35 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,448 hex characters · 1,224 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241435) = 3d2f768f2e4878593ee8721597ab1aa6 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
38
Filler GUID seed
new Random(486).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
260 · predicted N = 38 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,448 hex characters = 1,224 bytes = 153 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241435 (name+title). Key = MD5(password) = 3d2f768f2e4878593ee8721597ab1aa6, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 38 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c645da47-0358-5eeb-bb1e-3477a59190fb
  2 36ccf1ba-381a-347c-bd76-015b8d87ad9c
  3 e61116a1-c160-4c48-b65a-ee655a1e6f07
  4 8aed828c-1b23-2d1e-9768-8f23e68f6866
  5 6175c355-5914-5939-9e58-feebe1c53f8c
  6 864445d2-a9f7-2c5d-a43e-332470fb4293
  7 8b9728fe-264f-580c-ba86-2fe2395327ed
  8 96da4f90-f9a8-22a1-883b-bbdaa590ef51
  9 5dea9444-f61a-0c3d-9f38-eb23a4671927
 10 ecf6e281-b4e0-4c6c-9c0e-0afabd0da213
 11 82949c6f-6b27-3c83-a025-0d21ad37b9f7
 12 5506990d-fd47-890e-a61d-5d0f64c74e45
 13 156cd6ee-6e8d-6712-9214-bdb4aa323627
 14 b6a262fb-fcbc-20f9-b129-461021a7850c
 15 122d36b7-ddd7-1486-9bab-bf329070de7d
 16 eb5a7c47-9466-4384-b27f-3885adaeff7d
 17 36104510-8789-16aa-b7f3-7b7627e5690d
 18 91069038-d404-2d17-9c44-7ce038443093
 19 0bcd5d73-efe0-7329-9afd-2fff11424514
 20 56876625-d714-436d-b7e2-15f34f0fd635
 21 81a991b8-5098-31cc-8740-b49e9d6c4abc
 22 82ae2306-4b97-0e9c-a64b-e83f8d0cb0cb
 23 a79d386e-6bac-15e1-ba87-43ab16ed45f6
 24 8d701b11-fb2d-7280-9813-ecd97b2110d6
 25 50b8ed3f-0ae3-2f18-a108-05e9610404f1
 26 104376b0-5f36-1a13-a517-035fc9220329
 27 d85695fc-3abc-7acf-b2e0-20e223ee6393
 28 2601cb87-6053-7c61-9b38-b2dfc36a598f
 29 fd4e6b1f-4ae5-78e4-b3cd-7b3d707522d0
 30 a846aa82-0b0a-45b3-97b7-19a36df8dcf0
 31 7ad39712-fe35-5a8a-aa7a-e223d0da3c3c
 32 664b6819-184d-45ee-bd55-9606f9fd5e65
 33 75669051-704c-69a0-8b87-c9b837e6e022
 34 17f57d75-134f-195e-b059-bbd27c93f53c
 35 a293e98f-1891-3011-970a-826fc2efec48
 36 3adbd436-5477-73c6-a63b-32e1f2e18b43
 37 49085543-2b5c-5dda-a16b-564b0d7980ad
 38 47daec3a-8ec8-5a3e-9f72-16fa35e09faf

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 53425252043862141274301721777454613755. Exactly this sequence comes out of new Random(486).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 260 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 38; the post has N = 38 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results