A858DE45F56D9BC9 archive

201210030841 10ve1n

explained decrypted filler

3DES(name+title) ECB, 38 GUIDs, seed 213

Metadata

Post ID
10ve1n
Title
201210030841 → 2012-10-03 08:41 on A858's clock
Posted (UTC)
2012-10-03 12:41:14
Timezone
UTC−4 · title 08:41 against posted 12:41 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,448 hex characters · 1,224 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210030841) = a753a4f72a9e60d4b80aeb2c93165167 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
38
Filler GUID seed
new Random(213).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
86 · predicted N = 38 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,448 hex characters = 1,224 bytes = 153 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210030841 (name+title). Key = MD5(password) = a753a4f72a9e60d4b80aeb2c93165167, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 38 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9aa66c7c-f9be-080b-b180-07437c46395d
  2 f64204af-8c75-2e16-9d90-faee29094e1d
  3 508c1ffe-bef2-5549-830a-2f4aa199a12d
  4 25646b47-c21d-023b-9c8a-779481cf7dfd
  5 fac4f256-514c-39d1-98ea-3e98c2b35ad8
  6 b36d121f-3290-6202-87bc-86562c6e7239
  7 2ff6496d-2a50-33f0-ad3b-a12a1ebd4b0f
  8 b005767e-818d-2482-8fab-57257458031e
  9 e6133155-f05f-2df4-b72b-3d7caf3275d4
 10 b701bede-b830-76f1-89f2-baafdd8b18bb
 11 af3629e2-f88a-1086-8f09-c201f3bf0404
 12 20189330-4423-62da-b618-addbf1f31d80
 13 0ceec213-f292-022e-802e-3b1bd2c1a05a
 14 7aa2af23-3989-22a4-b15b-c4de86cb978b
 15 10af57c9-2fd7-0261-9843-327de4bd3dbd
 16 fd0d195d-dee4-0dd1-8a89-17d4be14c246
 17 4ee29a33-5845-3c84-93d7-dd4743f7aae2
 18 c03616f9-d787-0dd2-a460-cf60c9c1cc58
 19 0d7d3d47-3821-36f5-bb9f-58db0372e118
 20 91ae438e-7abb-7968-8e96-c6f46aebe685
 21 4bf1a871-5a4a-136a-905a-6758dddb0e7a
 22 909a1eca-80fa-0374-a469-1af7618b6e56
 23 de22166e-c485-8fc7-aa59-2ce2f2bf5306
 24 6958825e-1f70-30c7-82b9-96553047dac2
 25 6ef605ff-1c2c-5838-b637-b190f93a6f46
 26 00a4401b-90a8-4d60-93e4-2eed435a979f
 27 a40d55b3-e04c-03f1-9ba5-491f2801186c
 28 f8c304d8-1dbe-55fe-8be8-af5000074047
 29 3f8d375b-3f37-3974-a542-9a76ced1950b
 30 2dd020aa-9d4e-572f-99e9-0fb69c40e91a
 31 a1a318c5-1156-738b-b9b3-1b6413a66b2b
 32 a364599b-a515-534c-b0d4-4c3d4a95aacc
 33 eb8da439-9d05-8e0a-8608-6221474c0075
 34 804df1f3-7349-2975-9a8d-25f9a412bf16
 35 3ce50abe-5ab2-0772-b731-e3e01463b8a5
 36 6b35d1e2-1c91-88da-acde-5c8dbfaae669
 37 497f635c-a85a-4fe5-9e93-094365a5eb06
 38 32e1e348-2238-4b33-ad84-ec45a0f45d07

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 02503632271602003037108354053575820844. Exactly this sequence comes out of new Random(213).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 86 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 38; the post has N = 38 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results