A858DE45F56D9BC9 archive

201210021900 10ucy4

explained decrypted filler

3DES(name+title) ECB, 30 GUIDs, seed 955

Metadata

Post ID
10ucy4
Title
201210021900 → 2012-10-02 19:00 on A858's clock
Posted (UTC)
2012-10-02 23:00:39
Timezone
UTC−4 · title 19:00 against posted 23:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,936 hex characters · 968 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210021900) = c17c22220ad173240bd908c77c2b99a6 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
30
Filler GUID seed
new Random(955).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
45 · predicted N = 30 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,936 hex characters = 968 bytes = 121 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210021900 (name+title). Key = MD5(password) = c17c22220ad173240bd908c77c2b99a6, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 30 GUIDs as hex (shown below).

Decrypted: GUID list

  1 60382be9-ad3c-5d76-b40a-02b52a87e7f7
  2 db3fdd67-0a40-0885-bcff-b742c77ae7d8
  3 549b93ec-5611-2dd7-9a57-6fe2cf6e5d32
  4 1a12e6f3-2ea9-3650-b592-c2f6b08f4bee
  5 e35049b4-d9de-3735-8093-9cc5ea030997
  6 ffa60422-13c4-1e60-9ebb-44344db4d4e3
  7 cdafdea3-0509-789c-a144-c000edbba40c
  8 29d02fd8-5b2b-44e3-acec-a69ec4a1ca00
  9 61dd4563-f20d-184f-b82b-8246cefbe6d5
 10 0592c5ce-4e7e-3b68-86e4-bc42d848f39e
 11 a898b482-242d-7a50-bf18-2eb6f2729ea9
 12 09dee524-543b-00f3-9501-cccaaa3a239c
 13 15a7d56d-3936-11c9-86d0-6a74ca3d3a0a
 14 242b69b6-6c88-2102-9b17-ebf2abee8942
 15 454174e5-a1b0-4796-8176-8314fdf97de3
 16 04a0e3b9-f7db-4101-8ef7-746dc6caf922
 17 5fd8e299-2f33-286b-8ac0-31f1ffe8069b
 18 90e97b86-3982-0a73-964e-e4e72a8d84b7
 19 fe3bd4a6-f5f7-4217-908f-5d6ad1166a1a
 20 0f14e23e-439a-0ae4-b86e-ce8829880e79
 21 591b2117-b863-6d4b-bea0-4c4e3a7d31b1
 22 bf609b15-86c2-121b-917b-3e9baea4c981
 23 7d184169-36f3-3143-9f21-c76557488898
 24 d43933c1-5668-521b-9b82-03713f1f453d
 25 5bafb135-a950-2547-8808-d53543ee2891
 26 d3af218e-4b7c-67b9-b58d-e23697c0e14c
 27 a609f586-94e5-0f28-8cb0-49e429b2a135
 28 609539d5-9f60-3dcc-8289-5cae5cf0bc12
 29 bec49b06-1ca1-26dc-8aac-e3f058aa5fc2
 30 022c8aad-ec9b-1f02-988c-1ce1c672230c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 502331741370124420406135260321. Exactly this sequence comes out of new Random(955).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 45 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 30; the post has N = 30 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results