A858DE45F56D9BC9 archive

201210041502 10y87g

explained decrypted filler

3DES(name+title) ECB, 34 GUIDs, seed 342

Metadata

Post ID
10y87g
Title
201210041502 → 2012-10-04 15:02 on A858's clock
Posted (UTC)
2012-10-04 19:02:24
Timezone
UTC−4 · title 15:02 against posted 19:02 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,192 hex characters · 1,096 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210041502) = 1485ce1f65af91f04a56d557a3cf4304 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
34
Filler GUID seed
new Random(342).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
177 · predicted N = 34 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,192 hex characters = 1,096 bytes = 137 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210041502 (name+title). Key = MD5(password) = 1485ce1f65af91f04a56d557a3cf4304, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 34 GUIDs as hex (shown below).

Decrypted: GUID list

  1 53dc3ffc-cccc-3a75-865b-112d5704f899
  2 4142fb27-ca9b-1b59-ac33-33215cd4641e
  3 8d309f09-9b35-7dab-bd0a-7def3e7bfad8
  4 3b15562f-d3b0-5f61-a303-2b32d57345f3
  5 788dd693-4d60-5dd9-bc07-0ff03953d512
  6 4d2a530e-9990-33c8-9c33-84a6705b4474
  7 bc779ed4-8d69-18cc-9bc5-a2d9d9965ea4
  8 e15dbe01-99d0-09eb-a189-aa15a8e51670
  9 180c0d59-2f10-20b5-8cd3-c4ba5697e652
 10 4ecc5020-9269-3b68-b00f-be15b3c7436e
 11 81c8c69e-d7c7-2e44-bda2-00a709a2a376
 12 6b1b18f7-219c-47c1-8b24-a219568493e3
 13 0dcffe72-b117-624e-a4ef-99fc6167a9a4
 14 9c9561ac-8ece-33e7-bf80-8191ec36310e
 15 677f34fd-45db-33e4-aa2c-4a7fbf3219bf
 16 ea856dae-137a-5c5f-8e09-4c5eab217350
 17 8008440a-1d58-53e5-93a6-e6ad76e4a84c
 18 0f73ab7a-1960-0fd7-9ff1-6e8b89c047a5
 19 f9dde011-45a8-8133-8b37-5563eeafc18d
 20 279ddd87-e78e-6654-9288-6a75b78acab1
 21 94d2e1bb-745f-2f42-85ff-6bd9b18e2f86
 22 14c62df9-46f0-65ee-8955-ceb2bf4e6463
 23 0342a43d-bcda-7874-ac03-c5ed544a9130
 24 bc19ff70-c01d-4ac1-a582-4ad398537763
 25 f7332dd3-d502-1c11-87d1-0dd50d58cf2b
 26 98b6d0c8-be9e-4234-ae8e-e5f6c43dc5be
 27 80182155-6665-8a7c-b00c-443b92a908d3
 28 3d5530b7-d80c-516c-8b47-c709e6ca465a
 29 50428c28-0c63-051f-816d-c8c57dc5f561
 30 21e4f0fc-773f-46a7-be47-3e46f244265a
 31 e4d8c0f5-aa68-4c8e-b88c-59b889178305
 32 8df355e7-d0b6-4a81-88a6-9a607e895b8c
 33 27efb094-cbfe-75b8-b821-16dacce1c41f
 34 79ad621e-295a-5365-94f1-917d7e773bc2

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3175531023246335508626741485044475. Exactly this sequence comes out of new Random(342).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 177 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 34; the post has N = 34 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results