A858DE45F56D9BC9 archive

201210022120 10um17

explained decrypted filler

3DES(name+title) ECB, 24 GUIDs, seed 812

Metadata

Post ID
10um17
Title
201210022120 → 2012-10-02 21:20 on A858's clock
Posted (UTC)
2012-10-03 01:20:50
Timezone
UTC−4 · title 21:20 against posted 01:20 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,552 hex characters · 776 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210022120) = 039b3327fb75da1ad7d47a6b62299653 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
24
Filler GUID seed
new Random(812).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
52 · predicted N = 24 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,552 hex characters = 776 bytes = 97 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210022120 (name+title). Key = MD5(password) = 039b3327fb75da1ad7d47a6b62299653, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 24 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5e3db3c3-3780-81d7-8df2-80ae2708675f
  2 36870ebc-356f-0b18-83e4-002a3b72c80a
  3 ee0a15fa-4e81-3dc9-a878-7a931c21ee53
  4 ab8b77d9-6e36-71c4-8ec0-334b8efd2674
  5 4c987836-844b-7337-8f51-a1c452df38d4
  6 7a3d2df5-043d-16c0-90b0-fd3b4f64c1b6
  7 1d6f007e-2817-6d21-a2ec-b1223dde4761
  8 c498ef1f-331a-749a-8fe3-45022f042936
  9 6d9831d7-e2f6-30bb-8aa8-c557049892d6
 10 397a9294-581c-6711-8baf-5d6c2a5aefa1
 11 ec32afd9-e0a0-4aec-a7f1-f08f9e265c97
 12 caa07591-19e6-343a-ae24-342d126f91de
 13 75277ee6-a829-7b19-bfbb-2887796c0653
 14 e6f616dc-4840-8eb2-bd60-1ce6236d7fd6
 15 60a9d33e-dda4-33d7-bf54-4e76d26d2d66
 16 8c6bc369-997a-1190-836a-a34584ad12d3
 17 c09744a4-871a-16d4-b816-d6be81106235
 18 e5fe2f03-c293-32a6-9e17-cca051f61636
 19 605d5f99-7459-5e22-9f24-df215baef888
 20 57523372-b5bb-64ad-a680-2df38d0b1c11
 21 6a410657-2a73-60ca-8777-c74def1c5c26
 22 2c5aa303-6ce0-0687-97ea-e3d49d7c01fd
 23 2d4fe85b-56a4-2df1-8d4d-974937555313
 24 458b5213-e60e-6fe5-8450-7bbe3608b1d1

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 803771673643783113566026. Exactly this sequence comes out of new Random(812).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 52 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 24; the post has N = 24 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results