A858DE45F56D9BC9 archive

201210040922 10xmxb

explained decrypted filler

3DES(name+title) ECB, 30 GUIDs, seed 680

Metadata

Post ID
10xmxb
Title
201210040922 → 2012-10-04 09:22 on A858's clock
Posted (UTC)
2012-10-04 13:22:13
Timezone
UTC−4 · title 09:22 against posted 13:22 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,936 hex characters · 968 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210040922) = fca8fac45d6a21bf317fa83afb1144cd (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
30
Filler GUID seed
new Random(680).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
160 · predicted N = 30 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,936 hex characters = 968 bytes = 121 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210040922 (name+title). Key = MD5(password) = fca8fac45d6a21bf317fa83afb1144cd, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 30 GUIDs as hex (shown below).

Decrypted: GUID list

  1 fc21ea6d-fc27-816b-bf7c-2c11d88e701f
  2 4bffc61a-0042-337c-b517-2f1096050a5c
  3 65b5fb38-80af-0b5f-ae9a-0077cbd6156e
  4 30d86b44-e0f0-6adb-ba0f-e6bf4eb45e89
  5 bfe611df-9257-1c73-b2d3-0673af778293
  6 1fcb663a-6969-7391-8eda-c1a367b412b8
  7 2d626e67-9447-5d2b-b408-91c971ce2b6c
  8 eba005d3-3f8b-5ac8-91f8-09a4e81d9dc9
  9 372dd0de-fcc0-0604-bf57-137e62bc1675
 10 c63d862b-f3e4-025b-9409-6039a06eb40f
 11 a925b594-168d-23c5-a026-5da2a09abe60
 12 853ca1be-55bc-3c2f-bb18-98cbbbe6a2b3
 13 c203f618-f905-0f48-9931-bb44f3606b55
 14 575933d1-775f-2a6b-84c3-4e4e703c76be
 15 652693eb-fd22-8b31-b11e-4bf75e72c3d4
 16 a77db712-6c90-6368-8eb4-6ee7ac590c6e
 17 6598deb1-6087-6642-b3d7-f9727930ec37
 18 1eaf3ca8-9533-5eb7-848b-2d7815547535
 19 b4798132-a7c3-0fb3-8242-8fd53b59d18f
 20 de2fcec4-9795-5c7c-9053-4c1faaded7a6
 21 0e7ec898-6ece-1b69-b899-be2e6b305960
 22 9202e793-a12d-6127-a443-17f02f2af599
 23 98546c15-c82c-8c73-8c4d-baae0642b544
 24 e3512636-9e73-50f0-b61d-39ac4080eedd
 25 a6634a28-6e74-33e2-972a-335f47ed0310
 26 462c3c4d-1376-8432-aae2-7d2fb3a2d274
 27 98e18ad7-fbbe-556d-974d-af3d4836b617
 28 d3b68439-921c-0024-96a8-a55f101e055d
 29 1f78c55b-ba1e-3fc9-a3c9-10613e5e485c
 30 ed9acab2-a725-6d7d-bc13-e78b714f5437

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 830617550023028665051685385036. Exactly this sequence comes out of new Random(680).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 160 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 30; the post has N = 30 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results