A858DE45F56D9BC9 archive

201210060624 111cjz

explained decrypted filler

3DES(name+title) ECB, 26 GUIDs, seed 451

Metadata

Post ID
111cjz
Title
201210060624 → 2012-10-06 06:24 on A858's clock
Posted (UTC)
2012-10-06 10:24:03
Timezone
UTC−4 · title 06:24 against posted 10:24 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,680 hex characters · 840 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210060624) = 27d59fe2f8f421cc60ec693346aff631 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
26
Filler GUID seed
new Random(451).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
295 · predicted N = 26 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,680 hex characters = 840 bytes = 105 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210060624 (name+title). Key = MD5(password) = 27d59fe2f8f421cc60ec693346aff631, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 26 GUIDs as hex (shown below).

Decrypted: GUID list

  1 868d1968-f19c-3c0e-a48b-0c07d5ce88b8
  2 17f31339-8325-1874-8c59-87077baed966
  3 d557a550-7c24-052e-b8ad-332cee89446d
  4 7573530d-fbde-7da4-b95e-6c3d6bfd24d7
  5 50653cab-d97d-7d81-bd49-0ebac2f2823a
  6 59ce2f34-b150-6938-a7d1-4be771108782
  7 1cf52163-30db-8640-bc92-ca471debe5f8
  8 b2da1e0f-e6a4-614b-af7e-6fa42750e407
  9 2a9083e4-ad6e-6223-aff3-03258040dc69
 10 854e63dc-c727-5be5-9252-83638e7c4758
 11 11866367-ee40-54cf-8f6b-a8bc5bcc5759
 12 2abd0687-34d8-588f-9a77-8d6a42463f1e
 13 8c2807cb-2019-67e7-8336-cd1abf9071c4
 14 f32eefc3-caaf-0835-86ca-873e940bcce1
 15 e10e6479-db2d-6816-ab2e-d3c5a62ffc24
 16 8ea0f721-7863-6d39-9f3b-23bba9a6b16a
 17 4e2a3326-8db9-35ff-89eb-7cd7a85b7064
 18 3aaba75d-fe3d-5eb0-8ed3-4a0aff244948
 19 033fda7d-fb9a-75f4-a8a9-9075fd046455
 20 3a7d54f0-9360-8dd7-9c38-025a15fbdb2a
 21 2a650228-5182-6472-8ad1-78d8acf2818d
 22 19f4acc9-f17e-4631-9757-bdc4c518ce2b
 23 090cb3eb-f53c-1e61-8128-32a094019f54
 24 61f0869b-ca5a-584a-ae6a-ae230323f24c
 25 4a16dc3c-e591-8461-838c-55a680a79fb7
 26 89f431ee-6b17-5761-b4e1-68bf177ecea0

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 31077686655560663578641585. Exactly this sequence comes out of new Random(451).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 295 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 26; the post has N = 26 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results