A858DE45F56D9BC9 archive

201210040001 10x31g

explained decrypted filler

3DES(name+title) ECB, 36 GUIDs, seed 272

Metadata

Post ID
10x31g
Title
201210040001 → 2012-10-04 00:01 on A858's clock
Posted (UTC)
2012-10-04 04:01:48
Timezone
UTC−4 · title 00:01 against posted 04:01 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210040001) = a0d739f1c61573521d2a5c19fe0b9e71 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
36
Filler GUID seed
new Random(272).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
132 · predicted N = 36 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210040001 (name+title). Key = MD5(password) = a0d739f1c61573521d2a5c19fe0b9e71, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 85a1b31d-c9c5-7a3c-811a-691a70641b2c
  2 eab2785f-7f57-56f9-aed4-611aa2c0e236
  3 e98a5ffa-1816-89bf-9ce2-290d85ae5f80
  4 3ebe7a2b-2315-5909-a454-e66105010d5b
  5 442aa404-86b8-00ae-a5b3-96d6a6279374
  6 a10ac4c9-fc40-2c77-84b2-2b36b7868753
  7 11a4e372-3c64-63b0-9b02-74ed920175ba
  8 89bff9fe-ceb3-83a7-ac5d-6aa1d499ccfd
  9 9e3886df-af56-5312-8117-53f8f6cd0db5
 10 7fb3c854-d09a-51f0-9607-576ecda254ee
 11 b383df39-ea26-6004-bc3e-c803bb29f92a
 12 740341df-510f-738a-bb77-1c112ed9937e
 13 3bba4ef6-1bb4-5335-b764-a4a9dcbdf229
 14 0acd8700-3e7e-86c8-88b6-fe63369d0500
 15 26a93948-64d0-3738-a79a-290cb3f62a4b
 16 f69fb42b-5b43-8459-a740-cba0833800f8
 17 426bd23f-c568-1b48-b443-18f9b8640dea
 18 734adced-4f3b-507b-989d-dbd7f308d4bb
 19 0ae897fd-2673-00a6-a393-e0fa722e05b1
 20 c9195975-0bf7-581a-98f6-cbecc014fb3b
 21 ad436bcd-9017-8a28-b72e-addb165b689a
 22 73445f6c-8d47-58a7-a4a2-17df094d834e
 23 9e3a3762-6f35-8218-9701-07fb22211c5a
 24 2ddb9e16-d35f-00b8-b998-92f847c2000c
 25 c869acb0-4d41-32dd-acfb-a4995bf14da2
 26 eba2b1ee-899c-4f80-9fca-f5c726f2b6a8
 27 324121fd-8889-74a9-8dd8-10530006258b
 28 01c586e2-78dd-1ae8-8b14-2e8ec76156c8
 29 40f5eb0d-6775-6d16-9523-dc3c43e9a0eb
 30 a45c3521-8ce9-1d59-b2de-ee2a59ab9414
 31 e10ab892-3a31-5406-ba14-f903e6b91829
 32 9622af6f-b0b2-0ae6-a555-9bbadea8e6b4
 33 00a406d6-aa36-6b11-90a0-98398dbfbc42
 34 cc394993-fc86-7ab9-9bda-4ff4ceac3254
 35 1523fede-bb9f-50c4-b016-c98d02b75e29
 36 cb6f847f-0a5d-4655-94f3-60e8207bb001

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 758502685567583815058580347161506754. Exactly this sequence comes out of new Random(272).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 132 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results