A858DE45F56D9BC9 archive

201210041902 10yoa9

explained decrypted filler

3DES(name+title) ECB, 30 GUIDs, seed 551

Metadata

Post ID
10yoa9
Title
201210041902 → 2012-10-04 19:02 on A858's clock
Posted (UTC)
2012-10-04 23:02:35
Timezone
UTC−4 · title 19:02 against posted 23:02 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,936 hex characters · 968 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210041902) = 290cf0e1462c3c9a67f8ee5c972b2e4a (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
30
Filler GUID seed
new Random(551).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
189 · predicted N = 30 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,936 hex characters = 968 bytes = 121 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210041902 (name+title). Key = MD5(password) = 290cf0e1462c3c9a67f8ee5c972b2e4a, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 30 GUIDs as hex (shown below).

Decrypted: GUID list

  1 fe369bf9-2bc4-53a6-9eb6-2cc3e5106cf1
  2 6fa8bbd7-27dc-46ec-bb5b-e1ca36f0c5f1
  3 d965c4d6-7ed4-88a1-986c-715e4921a856
  4 131fcf29-24c7-1249-b148-6c943c63b972
  5 6c086f3b-776b-80fa-b14b-37b619e1c3f8
  6 6a4abcde-2e5d-0387-9028-a2c2026b5530
  7 647916bf-7cf9-78b6-a631-44b06ef59df2
  8 1795edad-6f76-7e25-9f36-9128d110f41d
  9 8b23110f-cb03-1638-a1e8-cc50cdcfedd2
 10 747fad95-aa07-45ed-94f7-3a4a619faeaa
 11 6896e96e-7f0c-25b5-a255-97065672ee4c
 12 56912ab0-f0de-5a14-9960-af784ff3cbce
 13 5f0f7aac-291c-35ce-9a7f-0fb77f7f7a64
 14 918b904e-be1e-1a16-bd6c-b1d09a8eabc7
 15 8174e166-ed99-5812-8d00-aa14d4892af6
 16 881bae1b-5c64-1a95-be20-577be0b7b86c
 17 edec4432-f704-4e9a-b6b3-f03e6548931f
 18 5c49b291-2239-56e2-925e-d81469025d70
 19 413c237e-e685-5ed4-8b5f-7d962383bb76
 20 cf2ef8f3-3de8-5a19-8dfe-ce5035ec8c33
 21 bf044468-f40b-0e56-9c37-56684bd7eb9e
 22 a8440ce6-e25e-073a-9764-4f40ee4be651
 23 50b277df-4b91-10b0-935d-005173be2baf
 24 d9b34bba-6b76-44a7-9022-ffe44fa99bdc
 25 7d95abf0-58f3-6e1d-9290-d047e6165dd4
 26 cbe50e07-4d2e-8e71-b025-9a5756fd6805
 27 c76ea7e0-badd-5b24-b68f-3843356beab6
 28 8b645450-1c49-0088-b846-f5d0d0a72a28
 29 ab8dca78-ceda-631d-a149-62c87d425976
 30 b0c7532e-fa91-7fde-957f-2c77dcf2c152

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 548180771425315145550014685067. Exactly this sequence comes out of new Random(551).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 189 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 30; the post has N = 30 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results