A858DE45F56D9BC9 archive

201210060523 111bdc

explained decrypted filler

3DES(name+title) ECB, 26 GUIDs, seed 483

Metadata

Post ID
111bdc
Title
201210060523 → 2012-10-06 05:23 on A858's clock
Posted (UTC)
2012-10-06 09:23:59
Timezone
UTC−4 · title 05:23 against posted 09:23 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,680 hex characters · 840 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210060523) = db0c1fb5d4efd49802fcabfd6151d247 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
26
Filler GUID seed
new Random(483).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
292 · predicted N = 26 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,680 hex characters = 840 bytes = 105 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210060523 (name+title). Key = MD5(password) = db0c1fb5d4efd49802fcabfd6151d247, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 26 GUIDs as hex (shown below).

Decrypted: GUID list

  1 6ec5afda-b0e4-055d-913d-d380d45d2de3
  2 e6a5e45f-cd11-47ac-ab8f-9979ebc8f3b7
  3 5574acb7-4e1f-335a-8dc8-2e6d38db8cc1
  4 bd98f316-5b97-5164-96d3-1ca66d7b1c6f
  5 08bf054d-7b5b-238b-9596-ef0ff19629df
  6 ab767ef6-19ac-5ca0-b072-b9843063372e
  7 69d0ea6e-b913-2380-a9b7-921be12b2fc9
  8 f2ca7e59-c811-6ca2-8016-385e615f1144
  9 64a943be-0df4-6204-8593-7a8781b37522
 10 e81156dd-0f59-374c-b183-306de7086e54
 11 4dc1ee1e-eedc-142e-8531-2f681131d860
 12 6ac02114-8b9b-4d9c-abc2-01ace7dd8c76
 13 155241bc-8dec-6277-873d-108aa15c09e9
 14 f5439e6c-a385-6f48-8cd5-3251dfd361d6
 15 710c405e-aede-034c-91f3-0f04080c4301
 16 003d8c38-254f-6cb8-8e09-27035009da27
 17 ffcef884-946d-8f47-a796-6a5860ea42d5
 18 23f08501-19f8-485d-9a4a-148d4db21417
 19 c4942edb-0b4b-62ab-91e0-b75c18c449b3
 20 763b2476-0f7d-3157-81dd-9018aaf6a168
 21 1f42d0c6-b3a1-8797-9f7f-3dcba8a71140
 22 ae9bd2a8-605a-3d32-9a25-4c0dd5587505
 23 29186b86-fa68-54c3-b4ac-f1ec0bee614d
 24 ff99150c-8dbd-653c-9794-e77636501dec
 25 981280d0-189d-0b28-9207-58d656ca5db4
 26 40e8cb50-afac-1b24-9d7f-af2c62c27aa4

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 04352526631466068463835601. Exactly this sequence comes out of new Random(483).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 292 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 26; the post has N = 26 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results