A858DE45F56D9BC9 archive

201210041722 10yhq3

explained decrypted filler

3DES(name+title) ECB, 33 GUIDs, seed 223

Metadata

Post ID
10yhq3
Title
201210041722 → 2012-10-04 17:22 on A858's clock
Posted (UTC)
2012-10-04 21:22:30
Timezone
UTC−4 · title 17:22 against posted 21:22 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210041722) = e92ed526071aaeea52e3a0d0db3db116 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
33
Filler GUID seed
new Random(223).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
184 · predicted N = 33 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210041722 (name+title). Key = MD5(password) = e92ed526071aaeea52e3a0d0db3db116, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 2488d94f-18e9-25ca-b171-162d72709f5a
  2 66519424-b175-27d1-b2a5-a2deb1e4b5bc
  3 6c663663-99ef-567d-bb0c-a550536852f5
  4 5ca556ab-f54e-122c-b6d7-02352afe106a
  5 c1b8c3eb-8b32-7c42-b71c-d2b6ab679771
  6 44924733-2edf-3b44-97c2-9f76eac67d32
  7 9dd33b22-cbad-7427-a5e6-49d747582cf7
  8 dd6653d9-475c-214c-9656-d9147cb17a02
  9 474bad5c-6b0b-5194-a589-ecb7b597a21e
 10 124fa0b6-38f7-4004-b30b-748b31eddb84
 11 4f949e34-cbf0-50cd-b1ad-bd1c75a17ffc
 12 f9432def-d394-5ea9-aeb5-64bf7e84ef55
 13 991acd78-ee00-88d3-9b90-f91fda32596c
 14 ef339247-c45a-44a1-9950-6ef5f863a02e
 15 3640b767-f6a2-0431-a899-3e60dbb678da
 16 8102ebca-e645-2cf4-948f-5cd94325cbc7
 17 dba2f308-180c-58e6-8370-dff88b070636
 18 ec1040c4-2110-2061-8d44-d02f0dfa0eaa
 19 95754b41-d17b-6194-9ed3-40cf5884134b
 20 a4687cf7-c6ec-598c-b427-bce68662453b
 21 26939974-7c5c-49d6-a807-a155ab54c006
 22 d19910bf-e729-5990-86a7-8c60985dd2cf
 23 69fa1738-e4ed-6e06-8cc2-ff8103aafde7
 24 a7a69bab-90e6-8472-9920-2ac30430f89d
 25 28c1edef-e43f-4a9c-a85d-754a8d882a59
 26 7166dae6-f1f7-8897-b5b9-de21d0e7744a
 27 20bd12f2-cbd6-58aa-83ba-6aed283c1945
 28 2b12e218-9d94-798b-87c0-e196406214fe
 29 e29065e0-1cc3-1096-83d4-ae2c046a558d
 30 65f66515-c8d9-6bf9-9abb-81c37f4ef4ee
 31 c1c1818d-a44b-4f41-856d-9fa7c40ccc94
 32 42f64542-855f-1478-8d3a-f050db29649c
 33 7dce3914-5874-8a7b-bf51-d20af2a24ba9

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 225173725455840252654568485716418. Exactly this sequence comes out of new Random(223).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 184 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results