A858DE45F56D9BC9 archive

201210020840 10tac7

explained decrypted filler

3DES(name+title) ECB, 30 GUIDs, seed 732

Metadata

Post ID
10tac7
Title
201210020840 → 2012-10-02 08:40 on A858's clock
Posted (UTC)
2012-10-02 12:40:12
Timezone
UTC−4 · title 08:40 against posted 12:40 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,936 hex characters · 968 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210020840) = e7f83f80d64578164f1adebaac3fbb95 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
30
Filler GUID seed
new Random(732).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
14 · predicted N = 30 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,936 hex characters = 968 bytes = 121 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210020840 (name+title). Key = MD5(password) = e7f83f80d64578164f1adebaac3fbb95, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 30 GUIDs as hex (shown below).

Decrypted: GUID list

  1 369a1e1b-db95-1b04-8508-c72daf879167
  2 666ef39c-ce12-55f3-b5da-e6f231c6a0e2
  3 6aa5f3ca-b67b-321c-89ae-3dccd6800584
  4 c4f7a545-5267-7916-b5c2-e4011b6a79fa
  5 4ea054ab-a41b-6510-993c-c253721cd121
  6 b6cfe547-d2d3-28dd-bb73-462f10aaa67d
  7 12c3d57a-017c-7b98-a21c-3b6f3b658dab
  8 3dc70037-93b1-6bf5-a564-3d7417b011fa
  9 9101ae00-54a9-4607-af4f-01c51a193292
 10 9609ecbf-7447-14c6-a9cd-8850bcf51f98
 11 c3814486-67d7-5324-8631-121b7cb71861
 12 3cdaf8cd-5712-81ad-b9fa-84f0a31a03d1
 13 f1ee960c-c5f0-7c32-8ac6-dbfa0f460430
 14 5f8c80bc-61b7-23ad-8013-f972abf3c4fe
 15 0c70458b-184c-3e5d-9a2d-d83084a4186f
 16 58c15e26-c818-18f3-b0a1-9f09b4f464c8
 17 579ee5c2-a0d1-5891-a861-dea4c98ecae0
 18 16063553-915f-7224-a321-9e5e09fd176e
 19 4bffba28-da9d-4cee-ab78-24a6cee1e524
 20 9fdd27b7-4fb0-6796-8f4c-ac769b9c69ef
 21 493f461c-c61b-0801-973a-a1b374cab573
 22 a18433ce-515b-312c-b622-68b5fd93909b
 23 19957fe2-93e1-6c07-a6c1-2b7c8bff0990
 24 91d51442-2819-6dc8-aec7-c66eb13c314d
 25 b3651fc8-11d4-334c-9942-220eac6f9b9d
 26 d3d68ea3-45c2-353a-bf30-d37527c0181f
 27 252cf926-8877-24f8-b45a-4b28d0896376
 28 32bee386-b9be-2c0b-9b86-8c261a708bf9
 29 7cd6b9a3-dd43-693f-b274-975dee3c1188
 30 a4174a88-cd95-5e29-a98f-ef865f5330a1

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 153762764158723157460366332265. Exactly this sequence comes out of new Random(732).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 14 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 30; the post has N = 30 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results