A858DE45F56D9BC9 archive

201210032321 10x07j

explained decrypted filler

3DES(name+title) ECB, 36 GUIDs, seed 656

Metadata

Post ID
10x07j
Title
201210032321 → 2012-10-03 23:21 on A858's clock
Posted (UTC)
2012-10-04 03:21:47
Timezone
UTC−4 · title 23:21 against posted 03:21 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210032321) = b5c021e849eddab1f72b66cfb1efd15e (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
36
Filler GUID seed
new Random(656).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
130 · predicted N = 36 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210032321 (name+title). Key = MD5(password) = b5c021e849eddab1f72b66cfb1efd15e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 261aa46a-ea6c-36ab-90d0-d6bcb071538d
  2 aa362e65-facf-2d7e-9b0e-cf21f9a2cbe4
  3 3e05b108-985f-21f5-9791-a179003329d2
  4 ee2823b0-df64-5ad6-b912-b526630d5773
  5 fd59b18b-2def-309d-a3c9-b4fe2c7352f1
  6 a873ff5a-2572-76a7-b85b-bdf2fb9c117b
  7 1b186a5f-a448-7d74-ba14-79cf9715b05e
  8 12d7254e-abe4-43e5-8c7e-06e016f5884d
  9 93162415-e2e2-1215-b8b2-660d3c316029
 10 b5b825c6-e0b8-18ba-8e55-42c13b7593c2
 11 777329f3-3556-5ede-8976-087b9695504e
 12 b2b66d67-c279-5e7f-8cec-e60d1630c045
 13 546e9058-f0f9-51cc-88f4-8cd8e262f332
 14 dd1c4624-1dfb-69b0-94da-868d2042c8b0
 15 3aa4a46a-e66a-13f9-98fd-0c74452fbf4a
 16 70ef8a17-7d89-6cc6-a3cb-942a7b678a20
 17 95be9bac-5e37-543f-8901-ed7b69f843f0
 18 c433a40d-9ca2-6ae2-8cc4-79aa24390a5f
 19 0d91c892-c5e4-3908-9805-39649f63b48c
 20 28162173-f91a-2410-8aed-712dbdae3762
 21 90719d20-3739-86e8-abf7-5fc6738424c5
 22 f81d1bc0-7b74-7a54-9a5e-f1bae620ab5d
 23 09e6c128-d3d9-7045-97e5-592985e49a23
 24 e69180a9-fa47-1f72-b898-3d81d4811ea0
 25 0b1464e8-a66b-8c61-a558-6d45c6c2fc68
 26 761da9e8-8d7e-45aa-b59a-b8db5343fd03
 27 481306d7-460e-83e9-b058-2cdc15983254
 28 f90fa77c-7976-1bba-a57a-e92b66e94fef
 29 562925e7-dbb1-6ded-8b53-c746f6998aae
 30 250d7cb9-5594-36e4-8367-245b378eed5d
 31 cae0059e-fa71-3bf3-8b79-f6377953be83
 32 09f736e9-097d-2010-a6fa-46a09a10c09a
 33 731dcd47-42e3-0741-801c-4727372183cc
 34 d62b7bcf-4e8a-3bad-9546-b54886cfea25
 35 a090d253-7584-6a65-ba02-7532eed10a4b
 36 0fc1f800-1778-1a5c-b529-5d3a68892f0b

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 322537741155561656328771848163320361. Exactly this sequence comes out of new Random(656).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 130 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results