A858DE45F56D9BC9 archive

201210041802 10yke5

explained decrypted filler

3DES(name+title) ECB, 29 GUIDs, seed 225

Metadata

Post ID
10yke5
Title
201210041802 → 2012-10-04 18:02 on A858's clock
Posted (UTC)
2012-10-04 22:02:32
Timezone
UTC−4 · title 18:02 against posted 22:02 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,872 hex characters · 936 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210041802) = e0890d0349a0d8f0040f3a5645a0faf1 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
29
Filler GUID seed
new Random(225).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
186 · predicted N = 29 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,872 hex characters = 936 bytes = 117 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210041802 (name+title). Key = MD5(password) = e0890d0349a0d8f0040f3a5645a0faf1, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 29 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a8782c10-7ffa-28b7-b0ee-29023a9c7c81
  2 3a536494-f915-72b5-8db2-50f2244ac13b
  3 f03824db-0c6e-0010-9396-2b2d4aad6039
  4 7280d684-f9d3-5315-8636-18654c54507a
  5 1c59ae8e-2119-7876-b20d-9caeed75e8f9
  6 7f0fc928-ffbf-13e7-a379-def273404d8b
  7 bb316afd-e201-6632-bdae-f6800241e8ab
  8 1430aa1a-b730-2111-b2d2-833f8727fd2f
  9 205f3330-35f3-7992-aeac-7bf90b223fdd
 10 5ba8dd4f-b385-26a3-a7b3-fdebaa463191
 11 eeec3ded-4f9b-06ba-890e-836cee2ef402
 12 e13de874-bce6-1d17-ad63-4b4e4b446bc9
 13 5bd101f5-3975-212a-bd48-76fbeff1493d
 14 d9e66777-729b-4923-a599-761149a99b4d
 15 4e0387b5-4d8a-406c-ace8-a44b1ff24d17
 16 1859c29b-fd08-43cd-9e3d-090a60dea003
 17 5b07b7ed-3730-338d-880a-f9f59a088216
 18 946469d4-189d-4b0a-94a3-234f2b255737
 19 160c50ca-b5e2-661b-a573-2c3c017f87af
 20 5ee56ff6-8c00-3283-ab42-402b917c9456
 21 571d7bbf-49af-6616-a72d-993c05768c28
 22 cfa9a2d4-4386-0a57-ab56-db34988e787e
 23 e65c1716-a0bb-0fc0-adc7-76597dbf3c18
 24 18d49d93-8889-5883-85fa-e65da7a3215a
 25 7ed48b76-af1c-6d84-b0bd-a9a38953b555
 26 189f0f44-15e1-2a0f-9f94-9f719f0bfc18
 27 b2c37b57-6638-37ba-87c4-630f0f274a50
 28 19b82102-b309-0102-8407-a92ac3b278e9
 29 c5e67f1e-003d-682d-8a1b-3151c10e378d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 27057162720124443463600562306. Exactly this sequence comes out of new Random(225).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 186 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 29; the post has N = 29 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results