A858DE45F56D9BC9 archive

201210032141 10wske

explained decrypted filler

3DES(name+title) ECB, 34 GUIDs, seed 442

Metadata

Post ID
10wske
Title
201210032141 → 2012-10-03 21:41 on A858's clock
Posted (UTC)
2012-10-04 01:41:43
Timezone
UTC−4 · title 21:41 against posted 01:41 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,192 hex characters · 1,096 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210032141) = 925bf73bcd1de331306fd1dc3dd23419 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
34
Filler GUID seed
new Random(442).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
125 · predicted N = 34 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,192 hex characters = 1,096 bytes = 137 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210032141 (name+title). Key = MD5(password) = 925bf73bcd1de331306fd1dc3dd23419, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 34 GUIDs as hex (shown below).

Decrypted: GUID list

  1 8a5bb79b-c01f-5f43-a87d-ac9f82926461
  2 46f610bc-72b1-4875-b367-1195cc8f4c32
  3 858c39b6-74a0-6bdc-8950-4d3872cb581a
  4 52a0e96c-7845-8df1-adda-eb437b45faba
  5 bb5cf34d-8971-6144-9de4-5973ea01a475
  6 31c5a4f4-41c9-71a6-8d78-6405ed61973a
  7 639019a4-f624-88e5-a130-f69e0368d4fe
  8 a6c82dec-84b9-186b-a5a4-9960859ad3df
  9 988e5f6d-ef54-5371-9f7e-3dbb6e556de4
 10 827a5ed9-a7c3-2276-8d91-808b9cb846a2
 11 8237e444-bd42-8492-8cb1-71e7edfa0d0a
 12 8d9093bc-0d6c-445f-9148-1bc633d3e99b
 13 7bcda1d9-fc7c-4fae-a3f3-f0c562eb3306
 14 2c23c5f7-240a-3ab9-a7e3-baf3013077d1
 15 2d994d12-4626-3b23-b3bb-7af40e298315
 16 373bdcc0-f66e-0006-a36e-fa653b5e8e4f
 17 304ab712-8d31-5b1c-9d17-500f3c00b102
 18 8be43867-d369-0248-8bbc-fef0997e896d
 19 553fbbd8-2398-5fb5-8f8b-d1129901bd7a
 20 36585c10-4626-4bb8-9b00-6c3d925b152c
 21 3e1f4e64-201f-4efa-bda3-164b17a58110
 22 239b1446-4837-2d64-985b-a3f05c00567f
 23 e06e71ce-9af0-653d-87af-f5bd83c9b6df
 24 57fbde08-f36c-3ceb-ac43-4622d8b721f0
 25 c9cc2650-f6aa-06e2-ab1a-0aa0c8a140ea
 26 62660ec4-6f9d-7345-9259-7bd66dad03c4
 27 2410d3f8-c4cd-89e4-80c1-bb2dd8750c12
 28 5e7b0ca4-d8cf-4f8c-b5d0-cdc2be73e55b
 29 0060d7ca-366b-56fe-8c7d-ebdd791cc32c
 30 3fe29188-31fb-09a4-83c8-ff3be1a184d7
 31 e59f832d-4c4b-346c-845a-500f87d36292
 32 f088e20d-9eb6-7fc2-888f-9ec8409e50ca
 33 0da8f7a0-c2f9-027b-9b9c-6972553b38a1
 34 4ecd387d-8495-0909-9431-97dc489d28d8

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5468678152844330505442630784503700. Exactly this sequence comes out of new Random(442).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 125 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 34; the post has N = 34 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results