A858DE45F56D9BC9 archive

201210041422 10y5eb

explained decrypted filler

3DES(name+title) ECB, 35 GUIDs, seed 254

Metadata

Post ID
10y5eb
Title
201210041422 → 2012-10-04 14:22 on A858's clock
Posted (UTC)
2012-10-04 18:22:23
Timezone
UTC−4 · title 14:22 against posted 18:22 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,256 hex characters · 1,128 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210041422) = a17581d0c9f4dc3af43f9771dcca82ad (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
35
Filler GUID seed
new Random(254).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
175 · predicted N = 35 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,256 hex characters = 1,128 bytes = 141 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210041422 (name+title). Key = MD5(password) = a17581d0c9f4dc3af43f9771dcca82ad, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 35 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3ab0b2ab-6630-33fd-8a34-51744a975641
  2 733019e4-5504-305a-b348-9cf0f9f35cb8
  3 cefb43c0-4c92-2053-a941-25e7ce259b7a
  4 d9a113dd-f752-6c68-8421-cce0f35c9926
  5 b2248496-c6bd-7ca4-8d4b-816ee6dd9b0f
  6 d7aa2648-7b2d-4dfb-b9ae-2fd67022b894
  7 61c32eb8-0510-6c94-9ff9-e48dbf1d186c
  8 22e2dab5-16ea-7c0b-8b9e-6bf4a29ef459
  9 fc3233cd-fbb1-3555-943d-69b566fb97e1
 10 9888ae84-7b21-80fe-965d-fe2df53415db
 11 b11b9082-e2c8-3470-a48d-3e31540511c5
 12 383982ab-ebc0-6e1c-bd6a-887fd5aacc40
 13 2444c612-8494-2227-a5b2-23278ff2ddc2
 14 c88f2acf-19dd-5da1-a02f-d016ecdcda7e
 15 ac9d11b7-18e0-6d09-8814-8fc5983424f9
 16 4f1e81eb-3794-59e4-9640-7c2569dc9a1e
 17 baff466e-57e5-554e-a98b-4ae0034fc910
 18 309b553b-f0dd-42e1-9cd4-24b731047200
 19 71f4c35e-c7ad-40eb-8de2-cbf8401eda57
 20 ef44a9e7-3862-5f17-b3bb-18bf48905364
 21 748f367e-6771-5a01-bde2-8aee549686bd
 22 a41e2d24-cf0a-12a8-bf32-16a9a6e68ac9
 23 d3fb6d37-2c95-85be-b80f-e41196af7a04
 24 47b35c91-2a94-6992-b4b7-f38d4f2163ec
 25 6c533cc9-c8d6-5ff6-bc83-57b3071bc9f2
 26 b0754da4-4905-859b-8bd0-29fb716d1510
 27 6bc2555d-e5ac-2ee2-9f4e-fc505832bb6d
 28 b8a5ace5-31e5-0cca-828e-cee2ad5039e8
 29 736cf7fe-fad0-6f8f-a846-e675355fcef4
 30 5fc5646b-4335-5e5f-ab8d-9cef1a52237d
 31 7a5f2d41-5046-86c9-8186-a0dc80732cce
 32 dc5fcb37-701c-3e5f-90c0-2514abccea62
 33 3975bcea-5d21-32f2-933c-aa1f18ad197b
 34 d5267147-71ea-38a7-8442-210329f3581b
 35 30d0f470-7337-38a7-a6f5-09bb7491f873

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 33267467383625655445518658206583333. Exactly this sequence comes out of new Random(254).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 175 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 35; the post has N = 35 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results