A858DE45F56D9BC9 archive

201210031821 10wfeu

explained decrypted filler

3DES(name+title) ECB, 29 GUIDs, seed 948

Metadata

Post ID
10wfeu
Title
201210031821 → 2012-10-03 18:21 on A858's clock
Posted (UTC)
2012-10-03 22:21:34
Timezone
UTC−4 · title 18:21 against posted 22:21 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,872 hex characters · 936 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210031821) = b9bb8ffd419efca80171d45604068bf6 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
29
Filler GUID seed
new Random(948).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
115 · predicted N = 29 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,872 hex characters = 936 bytes = 117 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210031821 (name+title). Key = MD5(password) = b9bb8ffd419efca80171d45604068bf6, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 29 GUIDs as hex (shown below).

Decrypted: GUID list

  1 7abd1b80-0177-8575-b3fa-3214b480e184
  2 cf2edfc2-deb7-8b47-a7b4-470836624b96
  3 914f3eff-a6ae-3303-a8d7-01e3fefff44b
  4 50c00dda-db7b-884a-baab-3804562f1b3b
  5 54a1a7df-97f3-1d62-a89a-b1a898317d36
  6 81614917-ec5b-0a2a-8bfb-e5ed0fd8d37b
  7 75492a4d-243f-5077-8e45-45dd3a211f80
  8 9b324a95-9e71-0219-9b6b-c1434422e0af
  9 b3e3349e-679c-2bc1-9524-bd3c0ed118d6
 10 3b768f77-a72e-782c-9cfa-2dac772def39
 11 973db95f-23c4-6b2b-bed0-6b3ac0781df2
 12 2ae46f0e-3f3a-5edc-902f-66bce6a017a7
 13 d47ef487-e7b4-3bbc-9db9-f6eadb95f78b
 14 82eae7b7-1c99-6293-9922-8deeaee59d55
 15 736c712d-4f7f-4194-9278-b7e46e5ce3b9
 16 cca98f20-0e2f-0cee-a4a0-f49579af70db
 17 13442614-e269-3cf5-b21f-456470c43445
 18 ea6c4249-b983-62ff-8c11-85ca837e6368
 19 e812957a-253d-320c-939e-1a0450c5eb27
 20 a6254915-203d-34bb-a3dd-e1dfe85ba1f9
 21 8ab0e6a0-c00f-7293-bc22-2e0f1c610b6a
 22 bd745a60-7b4b-34d6-81ec-f7b573803fb4
 23 d26c66a2-1f61-16d1-93cf-918056213317
 24 da5e2f64-5a72-123f-bae1-5ab3d1569d42
 25 f045d0a0-8057-5156-9115-e59e75d6dfcf
 26 12832c55-5111-2af9-970e-18b85306fc17
 27 5ad53954-070d-8868-bc5c-20a3b95bd67b
 28 baa65726-859b-0571-bcda-dd21aaa52e4a
 29 d15df42c-b469-35eb-b505-fc30246b8441

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 88381050276536403633731152803. Exactly this sequence comes out of new Random(948).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 115 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 29; the post has N = 29 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results