A858DE45F56D9BC9 archive

201210040201 10x9cb

explained decrypted filler

3DES(name+title) ECB, 32 GUIDs, seed 562

Metadata

Post ID
10x9cb
Title
201210040201 → 2012-10-04 02:01 on A858's clock
Posted (UTC)
2012-10-04 06:01:53
Timezone
UTC−4 · title 02:01 against posted 06:01 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210040201) = 332f48ec2c84632e934da9faa404d3c2 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
32
Filler GUID seed
new Random(562).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
138 · predicted N = 32 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210040201 (name+title). Key = MD5(password) = 332f48ec2c84632e934da9faa404d3c2, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 03fd5514-a67e-28fc-bbc2-1ca1b3e7e1bd
  2 11034cfc-3b26-697d-b663-1470b0140299
  3 a67be458-2935-5001-9187-f07c2d840b3c
  4 804407aa-776a-4079-ac1f-5887546e6f81
  5 6aefcb86-9c37-8dcd-8ee7-adef6fe9b69f
  6 f94c2b04-33a7-682e-9df0-d0e4fcdbc3a5
  7 c55ea131-c795-6a27-9852-1bfd9ed43d50
  8 b4087244-1600-3136-95a4-ee69dbb9a281
  9 7652f2fb-04ae-410e-8fdc-75e16ee78e45
 10 23c82693-1133-4859-a56f-8475cb526a71
 11 daea9208-8be8-3f47-b0b0-e2c4914953ea
 12 3428efcb-3ad6-2d1e-9fdb-a815e74e1e20
 13 7c79f177-e95b-89e1-b274-5a652f40c1bc
 14 58a6e253-fd50-7c1f-a39c-314f9b568ef6
 15 25e549a4-067f-3f32-add4-2543aaf718ec
 16 f3af824e-df45-0504-b460-4d17d7d6af23
 17 a3ef8c6c-a44c-0970-9e5a-165bfa3a7be1
 18 b64d5a84-1d7b-393d-aa39-38a982c1ef1c
 19 77a602d0-6727-817d-98ec-caf2d92a80cc
 20 541d6c17-7d61-8a1d-bfcf-a9c1bcb15c0e
 21 6cd01293-9d3b-4860-806c-8592ceb60e03
 22 e954d68f-ed04-62d9-bf5b-283439401f81
 23 655c07d5-7eae-8ebc-98a2-0446eead2332
 24 f51dd3f5-44f2-346a-b5d7-04bf76fd4bb6
 25 fdd464f7-7cf1-72a0-9682-739a7af4a4a2
 26 14afdb99-a933-82dc-bb51-ebf0d5c24b03
 27 94d6e2bd-55ab-1d48-936f-9b8add886937
 28 d13b4c28-d24e-83d8-8202-a72ffe14d188
 29 145f45e6-4146-760b-b1e4-794c4f59fbe9
 30 682a0989-decd-69d7-bf06-fbc3c098c009
 31 71a8eff4-20ba-5bc7-b345-4440e9401e85
 32 8a3b926c-9c60-4ee2-b03a-2ef3d8060a12

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 26548663443287300388468378187654. Exactly this sequence comes out of new Random(562).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 138 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results