A858DE45F56D9BC9 archive

201210061344 111sf0

explained decrypted filler

3DES(name+title) ECB, 31 GUIDs, seed 113

Metadata

Post ID
111sf0
Title
201210061344 → 2012-10-06 13:44 on A858's clock
Posted (UTC)
2012-10-06 17:44:18
Timezone
UTC−4 · title 13:44 against posted 17:44 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,000 hex characters · 1,000 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210061344) = dcf8c32db26c74a4924b38b121efa18b (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
31
Filler GUID seed
new Random(113).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
317 · predicted N = 31 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,000 hex characters = 1,000 bytes = 125 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210061344 (name+title). Key = MD5(password) = dcf8c32db26c74a4924b38b121efa18b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 31 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a1e63591-ea40-6f69-af3a-2f837976d3eb
  2 c4844ac8-eec6-87d5-8752-6154b7803941
  3 d3423537-86dc-6798-bbab-a6ed81750b48
  4 71b4a0ee-ba5a-6817-bd3f-84d47cd046d7
  5 45b18c9e-9c68-2a11-918e-743ccf2f2159
  6 02a0c6c8-b946-2dfb-9064-47be5cf615de
  7 42b4b941-81fc-4d01-a426-caa041d0fc7a
  8 f3b0e5d9-6e3f-16ca-a475-00a5515524d0
  9 9e2dd038-53c3-88a6-b315-3962163171cd
 10 27c45a21-3d33-8642-8c8b-ca48eb28fe7c
 11 40aa952c-7b6e-4569-99bc-796be716d371
 12 1d9bfb68-f1cd-6927-abc1-b8e4a5ecb74e
 13 d8aadee2-9262-2a1c-a7f5-bccd0a47a661
 14 ece6f4f5-3435-22ad-953f-56d443b204fd
 15 b567497d-fb68-098a-9152-0ce7f64dd005
 16 b36d5530-26ef-54a9-bbf8-98bef7e851e7
 17 f95b05ba-0ab9-34d1-bb3d-80e3cfb7ce8f
 18 01d9c4e0-73ac-055d-b87b-60dbe0a46f18
 19 5c6f8993-3c03-6d89-a992-f63ce59f9671
 20 844fc689-7bf8-0fef-99e2-ee0e8a1a266d
 21 d6e02ae1-16e4-76d5-9d42-75b6d74338bd
 22 a59d873e-f1a6-5e13-8299-b2e3aa8ba77f
 23 60a4e997-4bef-048a-8ee9-61dee670cd6b
 24 5084c8c1-77a5-4941-aaf5-b10f7d983c88
 25 b868f3ba-1e5d-630c-bcca-60d4811db347
 26 e25d1b79-36d8-132d-8ab2-1371a782f789
 27 262ba790-efb8-0a12-8824-f4051deb078e
 28 5fff8e0f-276a-60f5-98eb-2589e703d3b8
 29 88daa263-9122-6d6b-b4a7-b343576d7494
 30 9bb0d71e-31ec-0895-b741-e272db66c3a3
 31 2cc09506-3a00-8a94-b82c-d3779ac7c7bf

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6866224188462205306075046106608. Exactly this sequence comes out of new Random(113).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 317 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 31; the post has N = 31 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results