A858DE45F56D9BC9 archive

201210051003 10zqjs

explained decrypted filler

3DES(name+title) ECB, 28 GUIDs, seed 323

Metadata

Post ID
10zqjs
Title
201210051003 → 2012-10-05 10:03 on A858's clock
Posted (UTC)
2012-10-05 14:03:13
Timezone
UTC−4 · title 10:03 against posted 14:03 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210051003) = c6b28203903802e2ba2171456a7cf34c (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
28
Filler GUID seed
new Random(323).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
234 · predicted N = 28 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210051003 (name+title). Key = MD5(password) = c6b28203903802e2ba2171456a7cf34c, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 22a78c04-a7c7-4c6a-9ab3-30fb0b8d371a
  2 58fcd49e-2444-5e07-bf40-5af303472701
  3 49956100-9fe5-4fc3-8073-7a745d9e8146
  4 659d0204-6800-41fb-8664-80e19dcbe53d
  5 6cdc29bd-6320-056a-b5f8-a4c467c68956
  6 5441079e-9230-786d-8fa8-8c1a1d5a33b2
  7 97df80a3-49e4-516c-b1c2-7b7c16adee1c
  8 20a9196d-8cbd-491c-a09d-38fec42460df
  9 b597f5ea-e64e-8a3b-86bf-cd480775ae91
 10 861497b3-3b37-3876-b42a-515a345354a7
 11 b595f990-2292-2c83-966c-fa5ff41c32dc
 12 434d2f77-8cbe-5c3d-b446-42c49ab0846d
 13 15298e4c-0f62-6c49-8a50-3b99f9ef99fd
 14 ec091c65-14fc-4c82-8b81-7fd4ff3ce7f3
 15 a958c734-1718-0b6d-9288-534bb2065cbd
 16 0d4b54f1-26da-69f7-ac1d-9ec786953746
 17 976427ea-31f6-58af-8abd-7098c169f602
 18 072aea10-efba-21ba-8b6c-0ce5c90e6268
 19 4b379eb9-d284-38f4-958f-d7990da643f1
 20 12749bf2-ebf6-3b85-82d1-57a761883685
 21 af86ffa4-fb9f-6b36-8e55-a2423a9b58d8
 22 d93f7836-f649-0649-b4df-6eafccd1d3bf
 23 cb5b1a6f-8a44-5779-9263-8a961780057a
 24 40f23f67-c3fb-7f6d-9330-59b1f41ded71
 25 edf8b6d1-aeb6-346e-8a57-3cc79d0dcf7a
 26 417e4c1b-67f7-2d40-b6f5-0805743d8833
 27 117ac749-a7d1-50ce-97bb-911321053c5d
 28 b5b58011-7af9-71d2-ad4c-f1839f64952e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4544075483256406523360573257. Exactly this sequence comes out of new Random(323).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 234 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results