A858DE45F56D9BC9 archive

201210021820 10uaav

explained decrypted filler

3DES(name+title) ECB, 25 GUIDs, seed 923

Metadata

Post ID
10uaav
Title
201210021820 → 2012-10-02 18:20 on A858's clock
Posted (UTC)
2012-10-02 22:20:37
Timezone
UTC−4 · title 18:20 against posted 22:20 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,616 hex characters · 808 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210021820) = d74cfa0f21b73fee4f4121b2ef1ddda8 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
25
Filler GUID seed
new Random(923).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
43 · predicted N = 25 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,616 hex characters = 808 bytes = 101 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210021820 (name+title). Key = MD5(password) = d74cfa0f21b73fee4f4121b2ef1ddda8, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 25 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d0cec106-cfff-895a-a665-c6452530f530
  2 8298f2ec-23f2-56b1-8756-3e4dddb92b46
  3 e6c0d196-b6dc-8678-a926-f4e0825678e7
  4 68ac7358-46fe-5b64-8772-c9015ac10e17
  5 de2f36ef-ec8c-8304-991b-b9c36b47dfcd
  6 5abd21e7-606e-1bf5-88fc-fd84798e1957
  7 21ac8b16-8464-4868-97ad-32c355c52948
  8 4b2d2271-fa06-4260-a659-b2493b3cdfa3
  9 1721e71e-9efa-1349-8826-e03356f27ca4
 10 40d24971-6967-52d9-92af-81a5e1c7a3d9
 11 fda2c63d-eea8-2323-a19c-9c065cdcad56
 12 cd415d22-1a60-0a64-9593-fbd4bd5e29db
 13 86a68c3c-9d06-1165-9b2e-106e0f418e0a
 14 1aa2ae3e-4175-5a8f-8ba4-ae332b093549
 15 d8316223-19dc-04a9-b402-e502fc0816ac
 16 a251334b-a298-4f03-adfd-5a610e129815
 17 2591d771-0346-761a-8b2c-576b67f47f9d
 18 b87bd0fb-e460-2679-9eb3-591f97f88a96
 19 496c4dd2-e150-5229-9830-6e13c86286f0
 20 1635a4bc-f407-640f-b5b2-8cc46cb5e9b5
 21 fffc73cd-5cb6-49ab-82ac-bda6c3da4711
 22 11a3da2b-d4d9-2f12-815c-f5f48b2eef83
 23 0f090b3b-53ac-80b9-992f-a67c5ef761df
 24 8330bf7b-a798-4244-a2de-2cbc6d0694ba
 25 f809cd37-d925-1653-a4d4-78fde5aa7a23

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8585814415201504725642841. Exactly this sequence comes out of new Random(923).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 43 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 25; the post has N = 25 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results