A858DE45F56D9BC9 archive

201210061524 111xy7

explained decrypted filler

3DES(name+title) ECB, 25 GUIDs, seed 283

Metadata

Post ID
111xy7
Title
201210061524 → 2012-10-06 15:24 on A858's clock
Posted (UTC)
2012-10-06 19:24:21
Timezone
UTC−4 · title 15:24 against posted 19:24 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,616 hex characters · 808 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210061524) = a2982b7db60643036340473fa397b5a7 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
25
Filler GUID seed
new Random(283).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
322 · predicted N = 25 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,616 hex characters = 808 bytes = 101 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210061524 (name+title). Key = MD5(password) = a2982b7db60643036340473fa397b5a7, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 25 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c884c5a1-d92b-5cb3-b270-417bbf63d131
  2 7aab7b24-bd82-7278-86f7-940a87f13680
  3 78d14697-f5ad-5032-8fd3-92db7b0eace7
  4 d980897a-f1c6-8fbb-b231-dc0a206c3544
  5 eb789dfd-250b-8613-a694-86cd53d344c2
  6 94c5d1a0-7b84-75b1-8723-00bbba078594
  7 191396c9-b9b4-66db-8b23-df4130cbda25
  8 aeed2a2a-2ce9-3303-9710-e2949b4dbd4f
  9 083f1378-c608-821c-8fde-fb20dcdf37b6
 10 1ba3d05b-5c5f-5677-a9e9-71f862d35d67
 11 c734a367-afbb-77a3-b744-7c3bbe085cd5
 12 b3439370-f5e3-3374-9a8e-a50842c48c0d
 13 c99a008a-e11f-1673-9a7f-2d526715e6ba
 14 57766082-a7ee-60c6-902a-3ed49bfd99e2
 15 c542c2cf-9ecf-082f-acbd-7dcf0f69489d
 16 17cd6dda-8660-6901-9eb0-fee829862a64
 17 0a226b51-78dd-743e-a170-15c52ba07171
 18 bb08bd16-cc54-4e7d-be1d-39c9ea056f49
 19 c9b8fc0c-ce8f-32dc-b483-1ae2ad8f3197
 20 e4060cc9-905e-8554-9f62-5a80b92ef22e
 21 ec7b433e-6688-3764-84f0-dd8af152145f
 22 8a86632e-3751-227d-a3d8-0840e49f78bf
 23 29860ac3-dd56-7b0c-8b4a-6d6f590633b4
 24 8913ebe0-1cad-8ad4-aa31-73bc06c8e023
 25 7f2f9427-6796-389e-87a5-75a2b1e84f33

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5758876385731606743832783. Exactly this sequence comes out of new Random(283).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 322 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 25; the post has N = 25 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results