A858DE45F56D9BC9 archive

201210030741 10vc11

explained decrypted filler

3DES(name+title) ECB, 31 GUIDs, seed 441

Metadata

Post ID
10vc11
Title
201210030741 → 2012-10-03 07:41 on A858's clock
Posted (UTC)
2012-10-03 11:41:12
Timezone
UTC−4 · title 07:41 against posted 11:41 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,000 hex characters · 1,000 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210030741) = e3ee4830a62ea1574c62422519f8a7f2 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
31
Filler GUID seed
new Random(441).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
83 · predicted N = 31 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,000 hex characters = 1,000 bytes = 125 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210030741 (name+title). Key = MD5(password) = e3ee4830a62ea1574c62422519f8a7f2, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 31 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b4592904-ecca-104c-a3b6-6772407e26e4
  2 9b9b3aa8-5484-111e-b833-f44440b81b68
  3 99712374-8fd4-016a-8f18-4c58c7103e5c
  4 58ab2fce-289f-6026-962d-78a4abb3da10
  5 77d7f3f4-438d-28fd-b8f7-1034c8f244ea
  6 77f97a35-3e08-878f-a6b6-d1671cf73c05
  7 c2489bd1-367a-4358-858f-e2d60fe2b85b
  8 8c4906cf-d642-6152-9adb-1c69e0f165be
  9 63575aba-3444-4ad7-9971-69151393fe79
 10 83a4a011-59f6-84dc-9f5d-abe6d770163d
 11 cc037920-b6da-12ff-a670-8c86f664375d
 12 5261c2f1-7cc5-65ea-8f3b-9baaedca9544
 13 0709d42f-e3fd-7509-a324-25b018491d16
 14 51e4df14-f3d7-87a4-9bf1-0ab239f61e34
 15 e09564ec-1fb5-6200-99e7-152929d18a4e
 16 4e5f3db5-808a-3c69-9fdb-45caeaba7cfa
 17 a9252786-65f1-2502-ae59-08ac175cb24a
 18 71bc1829-ac38-35f7-90c1-dadaca140aaa
 19 f6476bb1-70d6-5d8b-b5c4-e39ee8143bfa
 20 03f2a4c0-9a8c-020b-9d6e-f273b578d825
 21 4fced33b-aed6-36e1-aa83-76d725a5d2d0
 22 c3ecf136-5ec2-0fd7-a888-839068263c9b
 23 fc66a354-3e26-4d56-be9f-976a863af645
 24 7dc10fd6-d79a-0926-b0c4-a99682b9126d
 25 c4d749f3-8adf-8d6b-92c0-5539bf6dd056
 26 89097648-7f37-15fb-a74e-5b812ae4ee49
 27 1e2c23a9-66fe-0684-911f-25c745211116
 28 f19b61d1-7fbd-8ba0-91a1-445fded4982a
 29 ae99ab49-77b2-3d02-be15-c7b52ee6be6c
 30 5fc584b1-3c4b-2e07-8c12-6ad22366c49c
 31 c09b8062-5e5f-8e42-8e2a-82de4a7fdd68

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1106284648167863235030408108328. Exactly this sequence comes out of new Random(441).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 83 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 31; the post has N = 31 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results