A858DE45F56D9BC9 archive

201210040101 10x6hj

explained decrypted filler

3DES(name+title) ECB, 35 GUIDs, seed 493

Metadata

Post ID
10x6hj
Title
201210040101 → 2012-10-04 01:01 on A858's clock
Posted (UTC)
2012-10-04 05:01:50
Timezone
UTC−4 · title 01:01 against posted 05:01 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,256 hex characters · 1,128 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210040101) = 992b5c4885553272a50df6008fefad73 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
35
Filler GUID seed
new Random(493).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
135 · predicted N = 35 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,256 hex characters = 1,128 bytes = 141 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210040101 (name+title). Key = MD5(password) = 992b5c4885553272a50df6008fefad73, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 35 GUIDs as hex (shown below).

Decrypted: GUID list

  1 364b8d60-806b-2c2e-b9ee-195adce6c899
  2 38a6fe3b-4bb0-4813-ae06-f6393bd9565e
  3 a98dd55a-d089-3718-bfc5-0297bc9bd724
  4 bbe78cf8-46dd-7ac6-accf-78e852c633fb
  5 9ef1fe49-fedb-7619-821f-9b8ba65c137a
  6 ff7484cb-a35f-3797-9a59-748c846e5ffa
  7 50e23263-6fba-733a-ac08-d098cdca88cc
  8 a22c2094-cc5b-66ba-ab3b-f132ee8c2bd3
  9 449edf6c-0968-8ebf-a520-1778cda404bf
 10 fb2da1dc-2a9e-0e97-8063-4fa24cb97e43
 11 38ebcf31-f66c-40ac-a435-509a4dd56108
 12 51168c74-ed0e-39ed-ab18-ed349067027e
 13 c65506ac-2cf8-4c3b-8b6e-0cda54a4aa7d
 14 a2652a47-cf26-8e2b-81e9-3cba0d49494c
 15 4e2df8c1-45ea-0db5-97b0-5887c08c1fc9
 16 efef549d-6293-8878-95ca-eac9ddd7176f
 17 741250e2-1d80-0ec3-80ab-f43a72a9d8cb
 18 8cb74b26-e4ba-5076-b168-faea8c26e721
 19 b0e98ea2-d191-025d-95ce-2ff5987a7edc
 20 dec1c275-1b9a-168a-8087-74659dd5e076
 21 1d57c2e3-f086-2854-9514-dce4eec3ac12
 22 fa47b0f7-dca0-7519-8bc6-932009d5c6bb
 23 fe3386de-5401-21dd-8346-df2194b64578
 24 992a7fcd-cdd1-2db9-9a6b-641ea8114ef6
 25 f69c4212-3607-06aa-bb6d-b7e1010c41b1
 26 69cd93be-38d4-590c-a644-44188de3525b
 27 2ef1debb-ee1e-7c12-9c86-cee2e9fa2d3f
 28 5e6a7b65-5fd4-11ca-b4cb-534564c647e6
 29 2f8cc744-0d31-610a-980d-592a633b1dd7
 30 6805692b-33e5-1dd1-89aa-24b7b85738cf
 31 271b86b2-3dde-1c94-98b3-4e5412e15d75
 32 9906f215-a807-29ae-ab5c-393f6d9ff3bb
 33 8e459aef-bf94-43da-8a0e-1c256969dac3
 34 b048b775-7e1f-3566-b9b6-c9fed5aefb93
 35 1db751e2-9170-7dcd-920a-c7d31f6075c5

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 24377376804348080501272205716112437. Exactly this sequence comes out of new Random(493).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 135 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 35; the post has N = 35 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results