A858DE45F56D9BC9 archive

201210060503 111axq

explained decrypted filler

3DES(name+title) ECB, 26 GUIDs, seed 869

Metadata

Post ID
111axq
Title
201210060503 → 2012-10-06 05:03 on A858's clock
Posted (UTC)
2012-10-06 09:03:59
Timezone
UTC−4 · title 05:03 against posted 09:03 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,680 hex characters · 840 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210060503) = f857728df36f9477d9c492a300443b1e (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
26
Filler GUID seed
new Random(869).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
291 · predicted N = 26 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,680 hex characters = 840 bytes = 105 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210060503 (name+title). Key = MD5(password) = f857728df36f9477d9c492a300443b1e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 26 GUIDs as hex (shown below).

Decrypted: GUID list

  1 2a13814e-68b3-60a4-8284-9c000c381f01
  2 cd400dc4-2c73-7e80-8982-693f340ad917
  3 ecf8654b-22e2-1261-bbf6-2d1c260cf5ea
  4 4548a1d2-12e6-02ca-a26a-11677c6b0ab3
  5 3d9c64ba-271b-4048-97e5-1dd642fdd762
  6 7fedaddc-3fd4-85f0-b3da-a7df29a2906b
  7 9de93784-bc1e-2a77-b12c-bcd89b4ff3f6
  8 d9983d2a-2cf8-3f34-ac90-201aa4e4657a
  9 a3194464-42dd-4c98-9392-2b4b07d8e289
 10 3891bcb1-863c-619f-8bc2-b039575fb8db
 11 3b347495-0526-4da6-b048-68778117ee04
 12 a4ab0fd0-0911-8291-9e4c-d16c66dcf984
 13 bd4488a5-6c0b-0df3-8e02-d8fc3429fcf5
 14 48f12128-d26e-5b58-8929-7a2de933ce43
 15 ddb9e203-8bf5-2337-a68a-312d2d68ff75
 16 8842040e-8ae9-60e5-83c6-aac26ef8aa5d
 17 19895b83-a591-12d5-ae20-bf132d257864
 18 8823fd86-90ad-6d7a-be4a-6284b3ef052d
 19 42a65b22-ec9e-142b-a493-47e7d51edf7d
 20 5c8fcdda-fa4d-70d2-a0b4-9a187a2ab6c9
 21 68c5da1f-1a8d-2730-a88f-9d9fb1ca2848
 22 0befa64e-08b0-0f7d-95f1-6819e33589c4
 23 659330c0-114b-7b5f-bd96-e5b0b654fd90
 24 610253de-e192-5f14-b845-7b28b3472be1
 25 9ee2b088-5d5f-7d92-9558-ad2597251f32
 26 6abd4cf9-d0d7-4f7c-88a7-b4a9a939ed3c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 67104823464805261617207574. Exactly this sequence comes out of new Random(869).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 291 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 26; the post has N = 26 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results