A858DE45F56D9BC9 archive

201210050403 10zfoq

explained decrypted filler

3DES(name+title) ECB, 31 GUIDs, seed 562

Metadata

Post ID
10zfoq
Title
201210050403 → 2012-10-05 04:03 on A858's clock
Posted (UTC)
2012-10-05 08:03:00
Timezone
UTC−4 · title 04:03 against posted 08:03 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,000 hex characters · 1,000 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210050403) = b89aab1d20fec9d33e3f18aa8a72f259 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
31
Filler GUID seed
new Random(562).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
216 · predicted N = 31 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,000 hex characters = 1,000 bytes = 125 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210050403 (name+title). Key = MD5(password) = b89aab1d20fec9d33e3f18aa8a72f259, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 31 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d8899a41-9753-2ec4-9888-49fec2ec9486
  2 5dbc0aa3-ea48-68db-9679-25fed93548aa
  3 c1659f92-d62d-5216-90ed-4a9092bb1083
  4 1effcdec-6930-4ba4-89bf-99a627223ac4
  5 e0bc7718-64ee-8477-85b1-5b338c2bcfbc
  6 248496a5-2ef7-6b73-97d8-636652db8832
  7 8509a7a7-d83c-69ed-a57f-9ba651cc3c2b
  8 c5211706-83ee-33db-8870-83ff23bce000
  9 7a4e0974-f236-4650-bf86-3f41cb6a6f9c
 10 6df38e9e-f409-48eb-b728-93bbfeb2df87
 11 a16d9fa8-23f9-3b4a-b5d0-9abe54e4677d
 12 dc6b8bfb-4357-2522-b4fa-2a35b6f936dc
 13 b33da22c-a3fa-80a6-8df5-b8856950c4d9
 14 fb08cbc5-e9e2-7a55-b170-1cf774054c29
 15 f8985ab4-7b60-32a2-907f-75422d3e0e7d
 16 892e68df-24a1-039f-b494-72e7b0797b62
 17 17801b61-e63e-061d-bb33-eb58febe8f29
 18 36c63ecf-2826-3f8a-91a3-a6c45091226f
 19 9a4bdf94-8d7d-8ee0-bfdd-e9a1a9e38c08
 20 72b1a9aa-9ff9-884e-b746-75e213470804
 21 700b2079-7f8c-421b-ba44-450b9f1245eb
 22 c1b2bea7-eb35-6e73-ac4f-a105c4a8a20f
 23 a062d138-1fa6-84ef-97f2-6d53ffb002d5
 24 07124f16-0d51-3a14-b335-69c432e12d9c
 25 ff9ff437-d148-7b4f-9559-273ed8ffbcb8
 26 6ec84e3c-70f0-8b2f-92a4-02a5859510d0
 27 953678c9-6d8b-12a1-a1ff-d52fd0a0142c
 28 ec362f82-1658-8c1e-ab1d-85e89a1d1fdb
 29 96de70ff-9f96-74b0-9295-ed2c88929c64
 30 ccf43b00-4718-62a1-a081-498346735d25
 31 abcca0a3-6fbd-552f-90c1-79984883c956

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2654866344328730038846837818765. Exactly this sequence comes out of new Random(562).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 216 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 31; the post has N = 31 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results