A858DE45F56D9BC9 archive

201210040421 10xe1q

explained decrypted filler

3DES(name+title) ECB, 31 GUIDs, seed 381

Metadata

Post ID
10xe1q
Title
201210040421 → 2012-10-04 04:21 on A858's clock
Posted (UTC)
2012-10-04 08:21:59
Timezone
UTC−4 · title 04:21 against posted 08:21 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,000 hex characters · 1,000 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210040421) = 860e30e3098707e2736a0b312019ccbf (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
31
Filler GUID seed
new Random(381).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
145 · predicted N = 31 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,000 hex characters = 1,000 bytes = 125 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210040421 (name+title). Key = MD5(password) = 860e30e3098707e2736a0b312019ccbf, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 31 GUIDs as hex (shown below).

Decrypted: GUID list

  1 024bae8b-6336-608a-ba22-8557f131b609
  2 161f3e79-55e2-522e-b14a-ea8e74a23a70
  3 d7cd4c4d-ca74-04af-b165-f46208bf9aeb
  4 adcd3da2-9b21-7cab-949c-fa295160612d
  5 5d91b95e-b706-1591-94fb-762c29105599
  6 9a5c3e7a-654e-4f9a-92e0-85c8b7853cc0
  7 5bfce86d-91c9-565d-a3ef-6ba823835704
  8 4f0b9070-1d2c-5ad2-ac9a-544bb340b7d0
  9 f7f5d85d-68f1-1fc4-b60c-41753c23b95b
 10 dff7e660-90c2-628e-8e66-ac77cbdea849
 11 104f215b-cf99-8a03-9941-d181acd69656
 12 73904053-c53c-855d-9f7b-4a335adaf911
 13 31db133a-6368-4967-8edc-41bdf4545909
 14 5ed63b0e-7f1d-63e3-8d3a-32f81f6ebeec
 15 6fb207ae-b18b-6f99-ae50-f33250f6ac98
 16 0993be42-6135-85b8-8540-aac72187c0f1
 17 9cee27b9-a7fc-03ed-9563-4f22f2e1d958
 18 0fb1c238-cf4b-1f5b-b78a-6c940e71cc29
 19 6df3de0e-503c-843e-876e-0b37b0068061
 20 e8162928-9884-73ee-9b49-46d99ad22421
 21 519abd2b-7d08-3b29-b6f6-a23b2bf394bc
 22 f697641a-8aa4-259e-a87b-b0cab7894669
 23 4abeafb1-18d7-34a9-9327-fdfff6b079a2
 24 5b2a6448-a088-1916-995d-443733fc7753
 25 ce5b1468-af71-0bd8-a521-1059d060a048
 26 a0b63a04-bf1f-507d-9380-a7cdc294f89f
 27 c63b7fa6-7cd8-4fe7-b176-817e676e7e6c
 28 46cae432-15d9-6e5c-a1f5-58b70d3d0a09
 29 19b76d8a-05b1-7d40-8589-b8306e13c7cb
 30 db594fe6-c2bb-8d53-b696-5ff26db19483
 31 42bc14ea-d7ad-7f90-850b-09da5b6c600a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6507145516884668018732310546787. Exactly this sequence comes out of new Random(381).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 145 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 31; the post has N = 31 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results