A858DE45F56D9BC9 archive

201210051343 11036k

explained decrypted filler

3DES(name+title) ECB, 30 GUIDs, seed 220

Metadata

Post ID
11036k
Title
201210051343 → 2012-10-05 13:43 on A858's clock
Posted (UTC)
2012-10-05 17:43:21
Timezone
UTC−4 · title 13:43 against posted 17:43 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,936 hex characters · 968 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210051343) = ca6ce1a2de1f3f97236df81bf6af0691 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
30
Filler GUID seed
new Random(220).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
245 · predicted N = 30 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,936 hex characters = 968 bytes = 121 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210051343 (name+title). Key = MD5(password) = ca6ce1a2de1f3f97236df81bf6af0691, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 30 GUIDs as hex (shown below).

Decrypted: GUID list

  1 85877f57-9ab5-568c-bdc3-e111b7c3b160
  2 de92ee42-6b81-3837-a78e-5c9e159de926
  3 569a4af3-776e-425b-8f6d-39349f6c228b
  4 7aba85d5-496a-48fe-b42c-0483c2459dfa
  5 024bd5df-69c3-4b65-a292-31fdfdf45ea7
  6 e809f6e2-58c8-78c2-a872-22e0116c56b9
  7 1735be02-45c0-40e7-bf6d-2ab00fd4e344
  8 c8d764cf-6ff0-76f3-88e4-ce14627ff465
  9 c9f9d228-85c0-1dbd-b0ef-79a7bd26572e
 10 de4887c4-8a51-3192-a362-9e2bb18360fc
 11 7f7e51da-6098-3d79-b1c9-78d423b2ab28
 12 a53bfe6b-3bcb-2732-9df9-629467f49b8c
 13 8dbc4860-9fc0-72f1-a660-f0db80c5a189
 14 94ac233a-377d-8097-be76-07cf7efcda2e
 15 003f7495-2166-8b14-9fd9-0897d0597f24
 16 b7c52180-8d59-3379-8c93-f32548efb495
 17 15790524-a7de-394c-adfb-e4dd0eb538bb
 18 f5a57c41-66e3-3f72-a9ec-c0821f7ebdbf
 19 702ba3c5-4697-5ad2-ac93-1325d46da0b7
 20 b49fce7b-5801-49ad-a7c7-de76c431fe53
 21 f7c15713-ec79-08b5-b79c-cf1177b762bc
 22 8001f9b8-dac5-7c6b-be7b-466a4060cc91
 23 430f9864-a255-176c-9de0-431f28178f01
 24 e789a1fe-3df4-7ece-b7fe-97a60e8ba674
 25 27fafd40-6442-26c8-8655-b9bccbd364d7
 26 92b7e605-38ec-0dba-93a6-f0b306e0becb
 27 1a406974-cc75-0d95-b0ad-f6c2cd22c4d4
 28 892d3921-8a34-0eaa-8249-3f255315ac90
 29 fc25cf62-a711-2e32-842f-2a51df8058f0
 30 d5178d3f-4f5b-2d84-9276-05968dd81f21

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 534447471332788333540717200022. Exactly this sequence comes out of new Random(220).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 245 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 30; the post has N = 30 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results