A858DE45F56D9BC9 archive

201210030020 10uxio

explained decrypted filler

3DES(name+title) ECB, 26 GUIDs, seed 451

Metadata

Post ID
10uxio
Title
201210030020 → 2012-10-03 00:20 on A858's clock
Posted (UTC)
2012-10-03 04:20:57
Timezone
UTC−4 · title 00:20 against posted 04:20 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,680 hex characters · 840 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210030020) = bafbc14242f31eeb3fdf7811dea2274e (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
26
Filler GUID seed
new Random(451).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
61 · predicted N = 26 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,680 hex characters = 840 bytes = 105 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210030020 (name+title). Key = MD5(password) = bafbc14242f31eeb3fdf7811dea2274e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 26 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d30cbbb5-2d94-3118-94a0-8b6544765073
  2 3811b330-591c-179a-93ce-4bb381ab68cc
  3 86cf2a5e-3b08-0a41-8db4-154663baccbf
  4 c3676a79-a834-7d81-9796-8ba3d8190058
  5 eda55723-fc49-722d-8e73-7791c9227b24
  6 a75d65dd-c31a-6c71-a76f-51e95a7ab6ce
  7 08ba932b-3143-8ded-82fe-4035449a8fd8
  8 e9071bdb-c349-6b13-b72e-c6f289483d10
  9 f1743be4-080a-639d-a65a-a845b5c3d35b
 10 a438ff5f-8f6c-534a-bc95-d711484ccfee
 11 98618f7e-b686-5d7b-9454-f03f9f2751c1
 12 d6bfa2ad-b661-5741-8f0b-1174163b926c
 13 42200d36-109a-6e82-a372-5238e42d984d
 14 0675d94d-edf7-0361-87d5-f435a6e183c1
 15 b851a90c-758b-61a2-ac96-b328dcb31f8e
 16 1759a8f8-0889-66fa-ad39-d04b07378850
 17 6c0ee91b-fa46-3f7b-95d2-3d0c91feb314
 18 da7f545d-5150-59f0-8672-dc56a6430b74
 19 a54603d6-1437-7a14-bcbb-386dc592bb5d
 20 e858bab3-dc93-8afc-a9ea-a654262ef962
 21 2acfcd3d-a543-6483-9be3-c2ae118c2eb6
 22 cf9b1465-8c72-4ece-9e11-e77b76d5cabd
 23 643cd0d8-353f-1f91-9bbc-cbe2243445eb
 24 82d65240-70f6-59d7-8257-901416b9a390
 25 569daff4-ae50-816e-9f6e-1cb538eaa3b1
 26 cafafdae-aa31-597d-869d-1be3b969a52b

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 31077686655560663578641585. Exactly this sequence comes out of new Random(451).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 61 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 26; the post has N = 26 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results