A858DE45F56D9BC9 archive

201210051523 1109hw

explained decrypted filler

3DES(name+title) ECB, 33 GUIDs, seed 59

Metadata

Post ID
1109hw
Title
201210051523 → 2012-10-05 15:23 on A858's clock
Posted (UTC)
2012-10-05 19:23:24
Timezone
UTC−4 · title 15:23 against posted 19:23 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210051523) = 8d33319d29162a5ce64c7f8dc385615d (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
33
Filler GUID seed
new Random(59).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
250 · predicted N = 33 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210051523 (name+title). Key = MD5(password) = 8d33319d29162a5ce64c7f8dc385615d, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 af5dc439-c2ca-4fc7-a441-20fdf64506af
  2 7d60f69a-9cd9-12d2-a4c9-c8dd72641fa3
  3 8ea4a9a8-e3f7-09bc-a7da-093eac1b02d9
  4 43b08442-51da-1e80-807b-a59389b8e423
  5 21029d2d-a22f-70cb-9e12-f8b763fd269e
  6 5b736c5c-acbc-1a45-bfd2-fdf2ccbb80bb
  7 f3ffc009-5fde-3bbd-b11a-0cbc918348cb
  8 4b79431b-aea2-08d5-a1c5-395b6e34158e
  9 af45a426-1550-2fb4-8f4e-ee40433ab219
 10 92f51cce-9f4c-01ad-9282-c7d3de6b1594
 11 493cbfca-0a9b-6530-aa0c-4fcef3594166
 12 eb66f182-5678-4540-b051-3f7720821eba
 13 93f6db27-16a7-1f6e-afa3-1bcc577f1cff
 14 8e1fa7d9-08c2-1536-b2fa-cda64cd0d03f
 15 e86f7237-0ffe-2a6b-b28e-5768f2d5119d
 16 cfb8a96c-a96c-72e4-aa5f-40293825b6fa
 17 5fea9164-03d1-572b-8a4d-8bb16a21500b
 18 17c3ce90-d3c8-5018-91df-90bd11c337a4
 19 6f7fbf40-fe82-2562-85a2-ed98d32f66ae
 20 709b6655-768e-1b25-ab36-5f5b98936fbb
 21 f0b69cf2-493d-506e-949c-c86185509a97
 22 8e033137-68c3-211b-a032-ea714ab9b6e1
 23 1b5fdc88-d814-8eda-8bab-bf357369052a
 24 706740d6-024c-5fe4-a052-a3fc670bf530
 25 2256f534-3bb1-4f1a-bf09-ea6faa5d83dd
 26 64b9c2b0-f993-46fa-9f4b-a5dcf94a22a4
 27 5033c169-d86f-5163-91c4-d5a8a1621d67
 28 15f053cb-2543-2a1a-beae-ca052d343f94
 29 f5ad1510-58d1-72e7-b25f-5a856a2b81f3
 30 cc6c9345-586c-55e1-95d6-c3946ba28e27
 31 9c83803a-dfb3-8c62-8ecd-38ca64854887
 32 a846db33-5bbd-8e4f-85de-61d3d43f52c3
 33 f8be8728-ae34-03db-88df-4011b3a1a559

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 410171302064112755215285445275880. Exactly this sequence comes out of new Random(59).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 250 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results