A858DE45F56D9BC9 archive

201210040341 10xcyk

explained decrypted filler

3DES(name+title) ECB, 39 GUIDs, seed 989

Metadata

Post ID
10xcyk
Title
201210040341 → 2012-10-04 03:41 on A858's clock
Posted (UTC)
2012-10-04 07:41:56
Timezone
UTC−4 · title 03:41 against posted 07:41 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,512 hex characters · 1,256 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210040341) = 814ecdb8b0ef68f1df4ad4b8b0cb8d1a (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
39
Filler GUID seed
new Random(989).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
143 · predicted N = 39 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,512 hex characters = 1,256 bytes = 157 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210040341 (name+title). Key = MD5(password) = 814ecdb8b0ef68f1df4ad4b8b0cb8d1a, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 39 GUIDs as hex (shown below).

Decrypted: GUID list

  1 8bb5d714-a7df-3908-9ac0-ed442c75d183
  2 f0dbace0-5465-0d59-ab47-25278290adcb
  3 4522a899-4192-09b5-9a95-fec93c17e4ac
  4 4ce2d556-ebec-58e4-9a7a-e57927c09317
  5 7d04d815-3340-67b4-9069-fb6e213f1254
  6 9b0a9acc-503a-7c62-a823-b86c7ab5c607
  7 f92cb2fa-e2ba-0b9e-af69-218866cb0e96
  8 cb56bd06-14e5-53de-8135-8215bc5570a0
  9 7a7157c8-b21d-3ae4-9242-51b2f0c87bc6
 10 ac88aead-f883-8b96-93c7-7171a3859659
 11 26249817-279d-88b1-ba6b-34ef1d464e69
 12 9ce41336-7e81-58fc-9a75-25baf99f52d9
 13 e38b7be7-faba-46d3-a725-bccbb649f214
 14 70c030b2-bc68-0ece-9725-97004f4763ae
 15 b7a0afb3-c260-2e1c-88ff-ca4ec48dc9e0
 16 3fbeed8d-6a1a-6a2e-9922-51e8bb1654ad
 17 09ab14d2-55d6-5db0-af00-16d98b039be6
 18 43b9ab77-2e8d-168f-80e9-831f09b0db61
 19 86b16d4c-4298-4ed9-a906-337cd755a087
 20 b1d3d3e4-236a-243a-90f9-b2c6e00e298f
 21 96def3d1-cdb0-2f43-ac8b-b6dcdd261f75
 22 1b0c6b0c-bcdd-4ab1-af65-40d561593b8f
 23 63bea44c-615f-1efc-b593-4308c8da9e5d
 24 81b761c9-ce3f-48b0-9824-be8344e22bbb
 25 d6388032-df36-5d8d-a040-eeb5f0b20a9e
 26 e224fc09-2ba5-5697-a321-2f6a67b6ceee
 27 684d442f-a59a-283c-bd0e-6d7c22625f48
 28 76121dc5-e8f3-40b8-812e-bda79876b6f5
 29 e2479c50-028e-614c-8adc-c92734d4d1dc
 30 852a1686-4013-5ab7-8cc5-3cd3cb1b0224
 31 cf8bb697-eacd-2c1e-ae21-edc90e2cee29
 32 6ff10e5b-71a7-8abc-81a2-d18d05716cff
 33 f6876a9d-3597-8517-abd7-e03eab6872ae
 34 1eac92c1-8872-7a5c-8d00-188a32db8ba7
 35 92f7f88f-40dd-86d5-9815-e03b630fdde9
 36 93de9649-1ce6-5a00-87b0-1087957c8ce9
 37 d854bba3-3b02-2f07-98d0-84aaadac23f2
 38 1b4d2104-e7ca-3b65-9839-36f23f7d9c71
 39 0a61ca47-3f88-68cb-83ab-5a391044b92e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 300567053885402651422414552465288785236. Exactly this sequence comes out of new Random(989).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 143 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 39; the post has N = 39 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results