A858DE45F56D9BC9 archive

201210040301 10xbma

explained decrypted filler

3DES(name+title) ECB, 36 GUIDs, seed 473

Metadata

Post ID
10xbma
Title
201210040301 → 2012-10-04 03:01 on A858's clock
Posted (UTC)
2012-10-04 07:01:54
Timezone
UTC−4 · title 03:01 against posted 07:01 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210040301) = 220f77801e4d24097bcd2d07366ff0cd (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
36
Filler GUID seed
new Random(473).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
141 · predicted N = 36 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210040301 (name+title). Key = MD5(password) = 220f77801e4d24097bcd2d07366ff0cd, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c5409700-01ed-7412-be05-adc36cd58b4d
  2 d7813453-a1cc-59c7-bafa-9f027ec0c310
  3 0a409be6-61db-3665-900b-610506e7f7da
  4 c96d80fd-fcd9-4351-b241-7745d090e8e4
  5 dc601a60-1d60-612e-8eed-f5f053b5e0cd
  6 8af33499-d751-8fdb-a8fe-6c71fff00925
  7 7d860643-5595-7a1c-a123-624ede41396c
  8 6955e897-5608-6b30-98e6-2940341c8bcc
  9 35db5544-b9e2-46d0-bf06-2ea7c56c8926
 10 433fbb84-142d-6b79-905b-6c64b5301d95
 11 fadedaab-d689-605f-84a0-57df638508f2
 12 1da6ab20-4175-638c-b1fd-dd38bb6113ef
 13 2bf149c4-ee43-7442-befb-24aba5fd906e
 14 aff2a1f0-1532-428e-994f-36134c2b16fc
 15 04ad334e-d578-0c25-8ff2-6363e9b768e0
 16 82371582-c821-323c-9b60-804696fc47b6
 17 6cb87a7b-96cb-625d-a480-58912e681ef7
 18 9ed85b85-eb1b-2e19-8611-8fb9c9c5b1fa
 19 a74aaea2-4fda-4963-842a-4aa3b25860f9
 20 99765c1e-4639-4439-86a9-bf70c7cafd13
 21 f3f0c0b1-719c-5109-849a-388bc2148b07
 22 e9b4d914-65a5-82f6-af45-7507e680448e
 23 a23d38cc-f41b-8f31-b583-7d57123dcf37
 24 c833360c-a497-2939-9e71-1e2162fa5863
 25 54722501-9ae4-043b-a810-d603156ab158
 26 32336f08-7c2c-6e1c-8cdd-112c43b90bba
 27 45a4b20b-d7d6-5e47-9e4a-a3ebd4e88361
 28 e5b6af98-1bdd-60aa-8511-94481c6654fa
 29 8c6be560-b7dc-1007-995d-77c2f0ffcc4f
 30 b94ec20d-947d-0094-9028-6f91b1b85bdc
 31 2047b1f8-4535-790f-aebb-c992f65e2a2f
 32 127d7af6-9e98-04c9-9636-ced34ba4eb46
 33 6fcc614b-6044-4dda-bcd5-1ffd81676844
 34 6458e4e0-96ef-7a0f-87e7-a714e3115657
 35 9c419b3a-63a7-7709-8cba-7af96c1cd2df
 36 5dc95bfe-b0f2-22a4-b105-18e067f158e5

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 753468764666740362445882065610704772. Exactly this sequence comes out of new Random(473).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 141 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results