A858DE45F56D9BC9 archive

201210030140 10v1jh

explained decrypted filler

3DES(name+title) ECB, 38 GUIDs, seed 835

Metadata

Post ID
10v1jh
Title
201210030140 → 2012-10-03 01:40 on A858's clock
Posted (UTC)
2012-10-03 05:41:00
Timezone
UTC−4 · title 01:40 against posted 05:41 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,448 hex characters · 1,224 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210030140) = f937be66c6059750dbf11e5991c7c5e6 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
38
Filler GUID seed
new Random(835).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
65 · predicted N = 38 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,448 hex characters = 1,224 bytes = 153 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210030140 (name+title). Key = MD5(password) = f937be66c6059750dbf11e5991c7c5e6, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 38 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b777686d-5358-8dea-8c06-e500850f209f
  2 4e5de9f0-84fa-76a5-b649-a7cc0793732a
  3 4e776964-db84-3eea-ab7b-14198f9c6179
  4 45a1d5f8-f7f6-7711-b315-a4b9ca66bd58
  5 b8966d84-4ea9-11da-8e65-5ae1471d8a7e
  6 c5ac2565-fbb6-2fcc-873f-aa81c81f1843
  7 1cdd70b4-04d2-0902-be5d-ca42c9f4938f
  8 b16ccd5a-f3e7-352a-9368-9201ae7efbd6
  9 62dd7416-051b-237b-abf5-851395aa4247
 10 ff550e1a-88f0-1805-ba6e-7ec9cbd4ee9a
 11 d200891b-4799-491d-9b9e-ecdc27fb566e
 12 7eeb0377-1b21-3462-8ac1-c812c28e7c5c
 13 3b009afa-367b-5b1c-81ea-5f7bec786c8b
 14 c792f18b-aa27-704e-b815-01a50095ea73
 15 de431981-f8d3-4909-a828-b4d58b239bd1
 16 54d9b8f0-ac2d-4f67-9695-25eefeeddeac
 17 19c65c91-5484-734d-823b-0350e9e683f1
 18 c4ad80c2-1dd6-6186-b2b4-f306c3eaa85f
 19 97b6bfd9-5520-29f4-bae6-10b3e0eb85b6
 20 9ee3b186-4bd9-5c51-90ca-09c19ad98b55
 21 e994267f-34b3-6127-a04d-e1d9bb54e063
 22 9397a684-d3cc-6d67-a7db-e649365adcf6
 23 74d110ab-2b82-0398-8d3e-d43f07170b4a
 24 9323cee6-a964-602e-b0c1-261d0cc487e5
 25 53d67969-2367-4c28-9987-799d75e1a76e
 26 e36466cf-6652-5b3d-939b-54e5ee6cdfe5
 27 f3b34c33-12da-7d2c-9ec0-907b13ebb112
 28 370695fc-fdff-02ec-b24c-d6c0f56f6760
 29 cd3decf5-df62-1b1e-9e97-8ef786d8ab4a
 30 6df4b019-c6d1-5a50-bf76-179f53535d9a
 31 1fae201f-12ba-45c2-93f0-58c5f5399549
 32 e7139905-04a2-392c-b95e-72af1bbb6a88
 33 46af0886-06da-0b21-b054-bfbbb393bb70
 34 a1a67dad-c149-86db-9b41-845cbc4eebc4
 35 e53d2708-57e0-112d-a44b-8f3e5fd028f6
 36 70884809-4a5d-8332-9598-37f533595ca8
 37 35c6fc75-414a-694d-b54e-04ccd9f1f6fd
 38 7ef3d979-5814-3464-9da3-e69cffcdc70a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 87371203214357447625660645701543081863. Exactly this sequence comes out of new Random(835).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 65 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 38; the post has N = 38 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results