A858DE45F56D9BC9 archive

201210031021 10vj05

explained decrypted filler

3DES(name+title) ECB, 30 GUIDs, seed 41

Metadata

Post ID
10vj05
Title
201210031021 → 2012-10-03 10:21 on A858's clock
Posted (UTC)
2012-10-03 14:21:17
Timezone
UTC−4 · title 10:21 against posted 14:21 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,936 hex characters · 968 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210031021) = f1e9149e6e256da4a37983f0d205283d (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
30
Filler GUID seed
new Random(41).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
91 · predicted N = 30 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,936 hex characters = 968 bytes = 121 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210031021 (name+title). Key = MD5(password) = f1e9149e6e256da4a37983f0d205283d, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 30 GUIDs as hex (shown below).

Decrypted: GUID list

  1 7135f7e3-9d9d-1832-a3b2-e2dce0f22e47
  2 3c6d8f2a-6c68-7960-b50c-a35dad200c61
  3 26e20374-4a35-37dd-a52e-d78a1c471fb1
  4 4c3f4e0b-564f-2466-88b2-6a2ab772807d
  5 7b157fdd-0c97-6c22-a9dd-2a4f8c4239f5
  6 f1e197de-4ce5-3b91-9651-c1388b3d5f21
  7 5feb2ecc-adbf-22db-b521-671591a2439e
  8 8817bb3c-ad04-0908-a4af-61caea02b620
  9 6729889f-0e94-08a0-9af7-f2f7181692dc
 10 cac711a0-4d9d-3c1f-8479-6fad01bbc79b
 11 e0064df1-cbc5-442e-b55c-167b05e6cac0
 12 03581560-a408-411e-90b6-f22e62a8cb41
 13 de28a428-bc54-7b5c-a54f-71263e3cd3a7
 14 4b5abbf4-6be3-74ef-af9c-c9b5db32e771
 15 4815fa00-4026-6be9-82e8-ed6bda95111d
 16 2801191e-806a-5926-bb1f-966a7717a3cf
 17 d7e6d223-f78c-07c2-aaa0-f9ffa7ac21bb
 18 ffb0a306-f887-3fed-974e-32d315f54082
 19 023a1129-9159-76d8-ad8c-7a8994ce3bc7
 20 133a29ef-64e3-1d4b-826d-9a817bfb9257
 21 37d13dbb-aac6-2486-a563-205e3f9ff1c2
 22 e3cc7cb2-eb5f-8550-9f1f-02fa22028dca
 23 16b3d694-3728-8cff-8adc-fc4b1efa1d70
 24 2b599726-36b7-3975-ab13-f018aabd7ce4
 25 c0a7f11a-ec80-612e-9a3b-6edea8f8c8e8
 26 7bbbf0f0-aa10-8141-8aec-5b8228f6f2ec
 27 36a9078c-c9d7-19bf-98b9-21c92a56c2f7
 28 f19c130e-a2ea-0cfc-9415-7d9d2bbbec84
 29 9e690ac3-718f-7f06-bb9c-396025c3ce7b
 30 f99c62b7-3c22-06ec-a89d-7449f1a74029

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 173263200344776503712883681070. Exactly this sequence comes out of new Random(41).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 91 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 30; the post has N = 30 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results