A858DE45F56D9BC9 archive

201210020640 10t6oo

explained decrypted filler

3DES(name+title) ECB, 31 GUIDs, seed 89

Metadata

Post ID
10t6oo
Title
201210020640 → 2012-10-02 06:40 on A858's clock
Posted (UTC)
2012-10-02 10:40:07
Timezone
UTC−4 · title 06:40 against posted 10:40 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,000 hex characters · 1,000 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210020640) = a5f024a9a3879f411c46915090bec9a8 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
31
Filler GUID seed
new Random(89).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
8 · predicted N = 31 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,000 hex characters = 1,000 bytes = 125 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210020640 (name+title). Key = MD5(password) = a5f024a9a3879f411c46915090bec9a8, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 31 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c0135d04-5a7b-18e1-a97f-fe4624470bd0
  2 7472c21f-5c5c-8244-8340-25aa6635bb53
  3 2d4f946c-7b66-84ba-910d-afa0bce158c0
  4 565ca008-0d77-4961-a3fe-0782901a99c5
  5 f58046a4-eec0-3d50-83a3-03d22b5514e2
  6 e7b3213c-5777-332f-9a42-04485aa3efd3
  7 5ef9d378-13a8-7cfe-9072-4ee8c185cc9f
  8 cdf43dda-bb1a-0a7b-9fae-7e4c07efa0aa
  9 68d18407-f663-86d6-b4b7-e00b529a197d
 10 2aaa95dd-4fb9-0a15-804a-28d6e7793fa0
 11 ca8b0c1e-68f3-7bed-8ba6-093afd750a33
 12 425c7f08-eca7-8275-8a37-3b0cd908caaa
 13 3b3c36eb-ddc1-7b8f-a050-1904a726e9f7
 14 4ad88264-ceac-6141-8cb9-aca87fce8f2d
 15 0984b3cc-3815-22ed-ba13-a0494e33352e
 16 c4edd0c4-9c70-5610-aceb-959b6854cfc0
 17 4e2865c8-e514-25d9-ad60-890b60b107d7
 18 892c3ac5-fd4e-19ed-804d-683b5f7425bb
 19 825b7a35-a39f-075a-9f6b-f7e1be0165fc
 20 484eec4e-252d-6cf8-9bca-4437dcbdbe5a
 21 95ba2fb4-d6b7-54c8-b769-f56d7124e00c
 22 43e2fcfb-5c1f-6776-865f-855d2a910921
 23 b1e84ca3-601c-02ea-9fca-dea5aefefa35
 24 27a1e334-83b1-12a7-aa20-3f61a274800e
 25 d0e3332f-8618-3391-b336-1cf2ba64179c
 26 e35826d5-8cc1-6138-aac3-77d53fc31290
 27 b070ee04-b8a0-408f-b45e-6b7ea0ab05c9
 28 c5439d57-230e-7624-b71d-a14882c00b1c
 29 bc7c49f4-338f-1de2-8750-81218ad27b10
 30 56b585af-22bc-6d54-b4a5-9e7e83528e13
 31 f2ea307c-41a7-044a-a571-6f45548d377d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1884337080787625210656013647160. Exactly this sequence comes out of new Random(89).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 8 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 31; the post has N = 31 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results