A858DE45F56D9BC9 archive

201210041302 10xzze

explained decrypted filler

3DES(name+title) ECB, 33 GUIDs, seed 938

Metadata

Post ID
10xzze
Title
201210041302 → 2012-10-04 13:02 on A858's clock
Posted (UTC)
2012-10-04 17:02:20
Timezone
UTC−4 · title 13:02 against posted 17:02 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210041302) = f71698b4bd9bfa7ca1c94e457d755e3c (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
33
Filler GUID seed
new Random(938).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
171 · predicted N = 33 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210041302 (name+title). Key = MD5(password) = f71698b4bd9bfa7ca1c94e457d755e3c, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 7781aeb4-ab07-6817-afae-d85b52da2a0c
  2 e78eba98-33dc-088d-b3f6-8d557185a302
  3 9f6f09aa-bd9f-309f-94f5-a96f84d54974
  4 b1affe28-2c8c-6d26-b2d3-0f0bfe8eeef5
  5 53411de1-1f07-6b48-ac4a-724e4dcc5b73
  6 b98fa354-6424-280e-8780-e718d4dd8082
  7 0e69e5ba-7432-1070-9faf-f597582f0820
  8 91626180-e4f3-0028-80bc-d323859f5fca
  9 759922f4-b70b-052c-a196-7b53fc472c91
 10 37ee11d9-33ce-16f4-8919-b5140c2959dd
 11 78b6809f-0e0c-361d-98a0-c921fc315fa2
 12 231fedae-e646-66aa-ae4c-7aedf786cabc
 13 75ac691d-8f15-4ed6-b549-6c4f0f75bdb4
 14 03f58b7f-6a85-4f18-b38c-5c4f06351664
 15 be1e1b7e-0904-5955-a432-65d8e497032e
 16 4a463652-af83-7b73-82f2-ecc37cd6b8f0
 17 4ec766a4-82ee-168c-9c8d-ded03d652c2b
 18 baaa1a5e-c8c7-4339-a8cb-3f321e7faa8f
 19 4a4a6398-6461-0e8c-aada-3fe09f924b2d
 20 9f6b15d5-1c73-41c8-825b-97acaaec6cd8
 21 cbe7a25a-114f-44bd-9895-47f5ea8880ac
 22 ba139938-de96-8e17-87e1-13bd6d557866
 23 e4aeddd4-c866-4ce8-9923-4b76651e78d8
 24 fe0bdc03-dc91-64e5-84c8-63d9ad3a4efd
 25 59d1ffde-f45f-5934-a6cb-604ae20ad8d5
 26 c1699809-d303-7266-be29-9de961fed76c
 27 df5e2360-92a4-3b71-8370-c01c02fc63b0
 28 9dfa8a12-aa12-7eca-9aae-15010b1234ea
 29 a40272c2-0ecb-5b3f-8284-f7a0e09db8b5
 30 2e4b739a-2746-4d37-a4ec-25ef6785a2c7
 31 e063ef79-df77-4697-8b6b-c0858abc4780
 32 b2a2d47d-57cc-42d3-bcab-f1a9826fce52
 33 bafdf034-7e15-4fdc-be7a-1fe69670e518

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 603662100136445714044846573754444. Exactly this sequence comes out of new Random(938).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 171 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results