A858DE45F56D9BC9 archive

201210061104 111kgu

explained decrypted filler

3DES(name+title) ECB, 31 GUIDs, seed 994

Metadata

Post ID
111kgu
Title
201210061104 → 2012-10-06 11:04 on A858's clock
Posted (UTC)
2012-10-06 15:04:13
Timezone
UTC−4 · title 11:04 against posted 15:04 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,000 hex characters · 1,000 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210061104) = 73787df16e9b6261f7b4bfd4a0e268e1 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
31
Filler GUID seed
new Random(994).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
309 · predicted N = 31 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,000 hex characters = 1,000 bytes = 125 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210061104 (name+title). Key = MD5(password) = 73787df16e9b6261f7b4bfd4a0e268e1, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 31 GUIDs as hex (shown below).

Decrypted: GUID list

  1 cb298eca-22b0-0f06-b778-9a073f81dbea
  2 a4a590a2-fe20-4d73-aaaf-1d6f88553532
  3 c8926567-630e-53fe-a9a1-e9655457b9d3
  4 50ee2d45-aadd-6861-94cb-455d2bf5b6f9
  5 054235b1-a094-8e63-96d1-c95230b4922e
  6 75864fad-93c2-1864-ad9c-036ed8e86362
  7 2015b996-0b36-282c-a140-eae19b6930b1
  8 8c451b97-e0a7-11fb-b057-e71d2e6bf628
  9 931739d7-708c-8bb0-b709-e93bce3c21ba
 10 56a54025-def0-7f7c-9461-d01ee453f6d0
 11 7d9c44ae-5f5f-59c8-bf17-5727b6af87c2
 12 e489de97-7676-4182-a6fd-5042e37bed5d
 13 452a6775-e360-8cc4-acf3-00fc7cd478e0
 14 7e0e1211-e071-5c84-8bf9-9dac288df0f9
 15 bce04b66-2086-6ec4-9f15-8c5e1f95029e
 16 7756b6ff-676f-766e-b7e1-2074c31245bd
 17 0801e7df-752a-6c1d-8c05-c048bacec3fd
 18 0335f483-6a22-2d38-86db-b165167ded39
 19 584a49fa-830d-5216-a265-4c3e7c701535
 20 87f45d73-da49-1761-82dd-9618e762e7cc
 21 19ee1dc4-2f5e-84c5-9241-a6168d83c571
 22 c007112c-997b-66db-b031-5a8d70eff05e
 23 4e53b76f-f1ec-8888-8349-9e76758bfbdf
 24 d70d8775-0764-2891-8f24-04366ee7b258
 25 81cc6653-5c42-1013-bf83-8cb926884048
 26 e4b1cfc1-4a21-7224-9b7c-5241830acf12
 27 1cd0daef-3463-447d-84b7-397e1468c4fb
 28 2bcaba84-5fcb-57c7-af0a-5c74592401ca
 29 56a8c60e-85cb-0f90-be83-25a811d9e8ff
 30 6e9f6bf2-f343-5ad4-a610-88592ceadcdb
 31 30336990-469e-13f3-babf-005d233bf550

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 0456812187548567625186821745051. Exactly this sequence comes out of new Random(994).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 309 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 31; the post has N = 31 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results