A858DE45F56D9BC9 archive

201210042322 10z44a

explained decrypted filler

3DES(name+title) ECB, 28 GUIDs, seed 401

Metadata

Post ID
10z44a
Title
201210042322 → 2012-10-04 23:22 on A858's clock
Posted (UTC)
2012-10-05 03:22:50
Timezone
UTC−4 · title 23:22 against posted 03:22 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210042322) = 98d5e107575ee4030c69daaab9d73513 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
28
Filler GUID seed
new Random(401).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
202 · predicted N = 28 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210042322 (name+title). Key = MD5(password) = 98d5e107575ee4030c69daaab9d73513, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 88a0c046-3a8e-1492-9a5f-4317946c4d04
  2 256001cb-f2e4-4369-b96b-4e9ebc8a85f2
  3 b1881b4e-e51f-00bc-a316-7508d2614609
  4 eaa20769-7f7c-1714-8e4c-60c20774fe92
  5 66ecb345-e807-294e-a9de-e6e4a38f3412
  6 a3d5bb39-c66e-888f-94be-1aa5cd80d2b5
  7 12effa0f-9e8a-5ce1-b1c5-bf63c68fb465
  8 d3badc6b-cb03-5415-b26d-6375668b387e
  9 4a79cd30-eebf-5147-8ef8-3bd171b91877
 10 4aa3b170-cbcb-19a7-b1e5-4754d3cd39bd
 11 d7cb165f-df4e-614a-8f05-7b8a144a15e0
 12 9afe4990-2840-4e77-90e9-5ada63ce9600
 13 afbe4131-ca7b-2691-abc4-8b8e34eb908c
 14 7ec7ba40-4a95-0b98-994a-af80b47917ab
 15 692aac9e-3942-6ef1-9462-13f4424e5ea7
 16 c15c55c7-68e1-48c4-9387-b131debee5eb
 17 c4cf6af0-32a5-3cec-82a3-6d329cf7e03f
 18 c5e58ed3-acb8-57ab-b356-62308646a9f4
 19 7fb11f23-0c97-4172-9cde-54fc15fe3fce
 20 81fb2289-f03c-5db7-8d55-6f0ec72f46d0
 21 459f33f3-e8b7-08d4-bbda-61847704626c
 22 55a8e08a-b3ea-2cc8-a9f4-f6c327273faa
 23 5384abfc-d694-6a44-afe3-f008268a5a86
 24 9f57eba9-894c-1f36-9db2-db2ce316bd56
 25 2469e299-e710-0ae7-b2f4-bf191f9f18c1
 26 cb9d6fb2-2f8a-385c-837d-acfc863a439d
 27 141f79be-b12b-6060-8431-ec04f8eeb6a6
 28 5c1709fb-10c8-194f-8dd9-0cf9ba7704da

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1401285551642064354502610361. Exactly this sequence comes out of new Random(401).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 202 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results