A858DE45F56D9BC9 archive

201210031901 10whxd

explained decrypted filler

3DES(name+title) ECB, 32 GUIDs, seed 448

Metadata

Post ID
10whxd
Title
201210031901 → 2012-10-03 19:01 on A858's clock
Posted (UTC)
2012-10-03 23:01:36
Timezone
UTC−4 · title 19:01 against posted 23:01 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210031901) = 375191bac5bdfe82403faf71db00ce02 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
32
Filler GUID seed
new Random(448).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
117 · predicted N = 32 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210031901 (name+title). Key = MD5(password) = 375191bac5bdfe82403faf71db00ce02, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 db8056d7-0a80-6bba-a818-887515d1c0fe
  2 474722a6-46e2-2964-bf0b-7ab5a726d540
  3 eb38fb5d-9425-8273-bd7d-a354dda96f63
  4 9100bf9a-5599-1621-a364-f7cf46eee114
  5 79f6397e-71d1-4c30-9099-eda3cb5d959d
  6 f6536db4-5ec8-0523-b5aa-ece068416374
  7 39132fbd-1ca9-598f-9a14-4bfb7546664a
  8 669aa908-bac5-14b7-92aa-e72b089bcecb
  9 898c3c10-fd82-3aa6-b512-0b18d34da120
 10 0a6c425e-8c03-4c6f-b54d-3626f205da5b
 11 cf585152-c56d-3181-9a3a-b3a0baa869c0
 12 cf91072d-c799-2529-a834-3200fc7f4dec
 13 e77a5996-b5fa-502d-8b0b-be9cf3919cd9
 14 d5f389ce-43d2-4d6a-ac2e-db87ceebd972
 15 2aaff29c-f36f-5cdf-8753-6cbd466e68e0
 16 ea34b1cf-457a-73ab-8012-fa09327a9e7c
 17 a98cf2ef-f9b4-1c29-a50e-c2fdc0b3d0e3
 18 0e535c50-89b0-6727-a5c9-c03e6e535aed
 19 28879a7d-42d4-7265-8dcf-73f5d9f25f3c
 20 2fd9ab1f-f082-7407-b661-b38392a026c5
 21 8d31150c-38e9-3f22-9fd0-1b6de00eed8a
 22 eaa0598c-bda4-646b-a238-20c26e82485c
 23 ee8dd232-51ed-686b-89a4-b454ad9dea58
 24 24f2dec7-4643-489e-8bf5-ecf9775ef97d
 25 6e790bb2-ff9b-5892-8528-0da0c2c5684a
 26 9c20b055-6012-6de6-9f71-a1d12c8e2e04
 27 7e783b3b-ef44-0e9e-a20e-7f79d7537f47
 28 205e74be-02a2-28be-8733-f5ae4a0d5d2f
 29 9609e8b9-172d-297f-a0e1-0d737d4b60dc
 30 336a12d2-a9b4-7b97-af43-d4ba0d4afb3a
 31 347a85fd-4751-5977-8a23-7cc08548ddba
 32 5923ef0f-28f5-4b78-8a62-672e20675ba9

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 62814051343254571677366456022754. Exactly this sequence comes out of new Random(448).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 117 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results