A858DE45F56D9BC9 archive

201210021600 10u0u3

explained decrypted filler

3DES(name+title) ECB, 38 GUIDs, seed 904

Metadata

Post ID
10u0u3
Title
201210021600 → 2012-10-02 16:00 on A858's clock
Posted (UTC)
2012-10-02 20:00:30
Timezone
UTC−4 · title 16:00 against posted 20:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,448 hex characters · 1,224 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210021600) = 5cc39ac9e40567225d0be68e577617fd (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
38
Filler GUID seed
new Random(904).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
36 · predicted N = 38 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,448 hex characters = 1,224 bytes = 153 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210021600 (name+title). Key = MD5(password) = 5cc39ac9e40567225d0be68e577617fd, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 38 GUIDs as hex (shown below).

Decrypted: GUID list

  1 47a79327-d683-8d49-8edc-84da206b8cc9
  2 11efc1fa-961b-0ebb-99f2-6b10fb33c2be
  3 234a7903-cfcf-5dbb-8d86-ad1d4953d75a
  4 b6be3d80-38a9-48ad-9f03-f7155010ccde
  5 b6d3b2d0-dd75-3bdc-920b-19932b10c584
  6 efedb336-8752-5cee-942d-ea8850bded14
  7 ba71f20b-0749-86cd-aee8-46046301dc52
  8 0a6bab90-888e-8f4d-9be5-d4d5e104fb85
  9 1abe4415-4906-7c52-87c8-0bcd7957f1df
 10 706f0fb4-0344-5dc8-83d1-a2f956041b60
 11 db665731-7ef3-2b43-98a8-92d08f6a4e27
 12 ffe6dba9-4fdf-2d0d-a15b-03ed8f41a548
 13 c252ddc8-d8d8-0c8b-b840-e5eedaac2528
 14 d8f82f02-2672-7697-b1cf-8cbe982b09e2
 15 32a0d257-cdaa-651e-b0fb-44e7c9c60e9d
 16 cbefc1d0-d773-5030-a038-41903dd10229
 17 84bf1fb8-e4c8-7f1e-a59d-a162fe367f5c
 18 65ebc8ef-7022-4bec-8b3a-cd228ed00c3b
 19 63a5ef7d-3449-1afc-9d5e-e7f80577f3d7
 20 00b99d75-dbe3-36f9-adc3-96ca91a9e9a3
 21 4a946456-661d-8368-a9e9-af282fe4cd80
 22 4312cfd9-0549-508d-9d5b-2a3076c71f6f
 23 f38012eb-1aab-66a8-8337-4e1f5f8a15bb
 24 d31700e6-5088-7185-8825-4abcef1e0f52
 25 9221621b-0a37-2f40-ad98-c5781dbcec3a
 26 07bcc42e-e221-8a9d-95d4-b4e1e7e0c074
 27 cbe248e2-eb75-1777-815e-64a3869cb675
 28 3ad7e1db-49ab-7522-a24c-6db1b03523e3
 29 3d1a640b-426c-28fa-8fe1-9c24449bf809
 30 3d482256-6662-1f57-9f14-c91fb1ac47c1
 31 268ffeb1-c676-81ee-89ef-b8e5662317a3
 32 6aed7aa4-8f71-5df6-af8a-43421a99d153
 33 b73eaf59-85d9-7ec6-bf2c-512b263b2930
 34 59c749bd-0e44-5a6f-817c-2ccf55ca7790
 35 35c0a4be-f5bc-2f6c-a01a-78b5a4ba73b4
 36 56d88f1d-52a5-8f46-af8f-a6b782f4412f
 37 53ff59ba-2118-7c5b-b370-d908dab473d0
 38 7adb8818-e0e4-4216-abb1-9640a7a646e1

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 80543588752207657413856728172185752874. Exactly this sequence comes out of new Random(904).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 36 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 38; the post has N = 38 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results