A858DE45F56D9BC9 archive

201210030441 10v7et

explained decrypted filler

3DES(name+title) ECB, 35 GUIDs, seed 344

Metadata

Post ID
10v7et
Title
201210030441 → 2012-10-03 04:41 on A858's clock
Posted (UTC)
2012-10-03 08:41:06
Timezone
UTC−4 · title 04:41 against posted 08:41 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,256 hex characters · 1,128 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210030441) = 0bc0af2cfff64f57720620dfae9b4a78 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
35
Filler GUID seed
new Random(344).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
74 · predicted N = 35 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,256 hex characters = 1,128 bytes = 141 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210030441 (name+title). Key = MD5(password) = 0bc0af2cfff64f57720620dfae9b4a78, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 35 GUIDs as hex (shown below).

Decrypted: GUID list

  1 20e09ffc-67d0-3d8e-8d66-981c8a8e3efd
  2 0ada6fda-a1cd-6c13-90ec-257ba5dcb0f7
  3 4b41033a-6199-1f61-8f9d-b3b9f80ec138
  4 18e32c43-3107-8c02-a046-422fb0170720
  5 638c7c13-a0d7-4640-99e2-5dd7517d5dbe
  6 9dcf526f-d6d5-14d5-8217-ac8551d9d048
  7 3e8d0857-dc23-0552-b0e1-1c3008f27d16
  8 bb8c5448-9802-0aa9-8fa3-a26b199c8550
  9 a81b45d5-0d6b-4fa2-851e-6dfb15b8a815
 10 1630ae5f-7a6e-150e-a5d0-326eb53520b1
 11 158f03ee-3645-6c85-b421-b4ce44678e6a
 12 0604afc8-11e0-0d86-b994-b37581e18a4c
 13 17738725-6fb9-1ef1-81af-31d1d0c4b13f
 14 6cafecc5-a15c-31cd-be26-eb022aee9d25
 15 60d6c344-3191-6173-8424-aba39181c86b
 16 fd971e57-f854-7869-8739-c7bfbee770bd
 17 7db69152-e52b-4aab-8ec0-aa69308531ee
 18 ea5cde0c-73de-2de0-bbed-25b407d7577b
 19 46260a17-dc17-8b41-9633-9e59360f1310
 20 f1ce4959-4a38-45a3-8308-665738af951a
 21 3bff2d8f-c88a-483d-85bc-8ee7760cbe74
 22 147d941b-35af-29da-a68b-3845ad07bf03
 23 fa735479-7c6c-103a-92b1-2da86eca5843
 24 9ff70c27-dfbe-105f-8cb8-a23689bccd0a
 25 a8727ee6-541f-316b-9241-ca5da62f1ad7
 26 ca8d4c0b-f7bd-7b59-990d-f48a325b7b82
 27 491e5f02-c381-6db4-b270-1f318934efd6
 28 81e79361-b42e-74d6-b71c-3edc9976ed9d
 29 92c8e5d8-fdd6-56f6-97b7-b7b2e76bba2f
 30 f993afec-a580-189b-9f83-fc97d37ee3f6
 31 247f6e3d-e838-1ac7-98d6-cb99539caea6
 32 39d2fffa-832f-0d82-bfe0-4d7dcf64bec6
 33 a855f608-0a0a-5023-bdd5-a41e92e0bf7d
 34 21475b4f-2a0f-5cc5-afbb-fe79fef4f225
 35 a56ec0f9-21c0-66ee-a371-2424680bb7aa

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 36184100416013674284421137675110556. Exactly this sequence comes out of new Random(344).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 74 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 35; the post has N = 35 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results