A858DE45F56D9BC9 archive

201210041142 10xusz

explained decrypted filler

3DES(name+title) ECB, 31 GUIDs, seed 289

Metadata

Post ID
10xusz
Title
201210041142 → 2012-10-04 11:42 on A858's clock
Posted (UTC)
2012-10-04 15:42:17
Timezone
UTC−4 · title 11:42 against posted 15:42 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,000 hex characters · 1,000 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210041142) = 3582df2b26e0a35d1d14f68032c618e6 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
31
Filler GUID seed
new Random(289).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
167 · predicted N = 31 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,000 hex characters = 1,000 bytes = 125 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210041142 (name+title). Key = MD5(password) = 3582df2b26e0a35d1d14f68032c618e6, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 31 GUIDs as hex (shown below).

Decrypted: GUID list

  1 923860af-2b65-657d-b657-27ec39e786a6
  2 ac016603-927f-56b3-b762-0676adb4adfa
  3 200d8f23-7e80-6d36-91b8-bcdd2e3b09e2
  4 7a3689e8-2b9e-20bf-bd73-2b4c19809181
  5 4b2e8952-1eb1-6a7a-8704-6f8375c0a7f9
  6 ef42e4df-cbc3-1f58-8318-ce22b92cca55
  7 588cfbe7-594a-3c77-8233-c533c6453198
  8 be114092-690a-3350-8794-b49dcc64e982
  9 c41f1aa9-5cda-66bc-be1e-593e086133d6
 10 b592c4f8-88df-78b0-bb2d-8989d287aa04
 11 40cd6ec6-7423-1714-993e-4a3896085ceb
 12 97135313-2a64-06e7-8711-dabd5ff3f30a
 13 cf6fbebe-c06f-2a4f-b6a2-7e9c21af9dd9
 14 664b76f7-b44b-776d-8a95-0eecf9b90165
 15 5715515d-6f57-25a7-b339-ec82e3c37327
 16 25b3fec2-cf57-408f-bdb8-c21845af8323
 17 621835aa-53f0-3b34-adba-3b8ac43f7b12
 18 bbfaada0-bb5f-1e8a-8e96-39187f674d1b
 19 5a0560a9-c630-4df2-a5cf-f3ac585cd866
 20 14cb3412-71c1-186e-a6b0-add3103e64fa
 21 a19dfd55-840a-1a47-ac05-6ec17b3a0849
 22 70e6763c-66a3-62f4-853a-d1ae3b228687
 23 ece1324b-5e5b-7c44-aa41-9e6e98f03c1f
 24 3d2d7e7b-ebc6-87b1-a101-3c09ab9b005a
 25 bcfc4380-f6b3-08fa-a1e7-fc918929cbd8
 26 1865b2cd-6285-3ca5-b48f-959d545be528
 27 9f4ab1a4-8d4a-3a03-83f7-ebf15069ab90
 28 b29d3f1a-f570-6cbc-849e-fbc63536ce22
 29 d99928e9-9845-3347-be5b-ee5cc26a385d
 30 b0ded8a3-141d-7533-8a3d-36c6420760fe
 31 63d878a8-d0a0-7894-97a2-87c3f443e2af

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6562613367102724314116780336377. Exactly this sequence comes out of new Random(289).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 167 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 31; the post has N = 31 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results