A858DE45F56D9BC9 archive

201210041022 10xq02

explained decrypted filler

3DES(name+title) ECB, 39 GUIDs, seed 113

Metadata

Post ID
10xq02
Title
201210041022 → 2012-10-04 10:22 on A858's clock
Posted (UTC)
2012-10-04 14:22:15
Timezone
UTC−4 · title 10:22 against posted 14:22 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,512 hex characters · 1,256 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210041022) = c45fec0abd19f56147b5f53627a489ed (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
39
Filler GUID seed
new Random(113).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
163 · predicted N = 39 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,512 hex characters = 1,256 bytes = 157 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210041022 (name+title). Key = MD5(password) = c45fec0abd19f56147b5f53627a489ed, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 39 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a38b54b7-edac-678d-9c93-3a0aaf4abc68
  2 6880ed18-99e6-8c49-9996-808e7b74c8b4
  3 4d3fc73f-f804-6009-8feb-98c6a898359a
  4 ac53fd13-759d-645a-b3b8-20e196973a12
  5 e85af2b1-caae-2fe7-b1bb-94b5ce390573
  6 dd336736-b63e-2841-9f89-b7526f9c4376
  7 3e9a5245-b22a-4b2f-a191-a4cfdaac26ee
  8 f54b0246-4dbb-1ecb-9b38-7acd4a256c2f
  9 a04898c9-7432-8722-af36-3658e5aeceb7
 10 180d2c80-c0c2-86f2-b61d-84a23528e671
 11 fea479b4-91b8-449e-8f81-2ee6cad1b8c1
 12 59b55727-a293-6232-b976-4fae5aea7221
 13 79848166-7787-2b32-9714-b70f77ca9126
 14 8487ddb1-0279-2173-ba72-c1cf28967507
 15 e65222dc-9aa4-09b2-84d7-c9945a25bed7
 16 8331fd12-c8c1-568d-bae0-65f88f6d8318
 17 0ccaede0-17f1-3b37-b49f-17062e7d992d
 18 9649ad52-22d7-0eaf-a4f2-02cd8beaf246
 19 d769eab2-0a88-6924-92cb-17f8f7fd0969
 20 121f6f89-6ab9-0053-968f-dd63a0d252ee
 21 b0d9be44-d083-74d8-b82a-03bcaf4ca837
 22 1f4d56c2-e227-502d-9905-fa4fc324f7e9
 23 9fbee183-3a95-0f9e-aaca-07b878b62cef
 24 2eabf879-8e61-45e7-8b6e-dc461bbd623b
 25 f6205228-aa1e-6565-8858-a7fcc34bac26
 26 52ba6fd2-a72d-1504-a6fe-87bf052d2326
 27 72979d60-7484-0686-bb13-81a2ed7d59db
 28 3c573ab8-869b-6b3a-9f95-a6d9d43a49b0
 29 6b0350b7-d6d7-63f3-b368-4c0ed4a5ec7e
 30 5f9346ea-e06f-07fd-bba5-beaf918ee687
 31 f3f93007-7d60-8417-b792-d3fa4457a49f
 32 c166e459-00a0-1688-98f0-4cb89b78d75c
 33 70ceb013-ab39-6d3b-83b1-65ae15afd059
 34 6bb04dff-a41f-7829-a025-2c214946ac5a
 35 51656123-91d9-0e35-a1c1-bc9f7b54d37d
 36 e8edfb49-9d1c-532f-8141-2937d6e6026f
 37 5e6367b2-131b-570b-9f2b-ede7f3592ea5
 38 94167ee3-6b5e-3df3-9365-995184155475
 39 312b7dc7-cff5-6b71-80fc-fd8b88a1e680

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 686622418846220530607504610660816705536. Exactly this sequence comes out of new Random(113).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 163 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 39; the post has N = 39 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results