A858DE45F56D9BC9 archive

201210061704 1123do

explained decrypted filler

3DES(name+title) ECB, 40 GUIDs, seed 190

Metadata

Post ID
1123do
Title
201210061704 → 2012-10-06 17:04 on A858's clock
Posted (UTC)
2012-10-06 21:04:24
Timezone
UTC−4 · title 17:04 against posted 21:04 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210061704) = b3cbd7fc63b1b27c2599b3e1800b8dea (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
40
Filler GUID seed
new Random(190).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
327 · predicted N = 40 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210061704 (name+title). Key = MD5(password) = b3cbd7fc63b1b27c2599b3e1800b8dea, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c46bc5e8-652a-8a03-b2fb-3826fb0ec8f1
  2 58c115a7-6d5e-5e83-b1e5-842cac3651bc
  3 8e335529-c5a3-5a69-bfe9-02b0c5994723
  4 23ec6033-09e4-1aa4-852c-5b462b7b4bbb
  5 361e64bd-9859-868e-88d3-adc520643f9a
  6 1d9a4b5d-e533-5761-aca5-3c2c0a65d1da
  7 eab4e042-1b46-0afe-a941-fc0b19701af5
  8 a83f3a8d-2275-6f75-8396-a5d69ba2ddd0
  9 cbf5a42c-de6f-4a86-85cc-817cefabe662
 10 353bc2f2-028c-3c67-a868-891bdd76496d
 11 820dba77-aafc-28d4-a88f-b61fd54d06b0
 12 77aca3fb-2ff0-7321-99f6-5c73abdcc40d
 13 cb13c124-d201-27aa-8c32-f962113314bc
 14 8cdc9483-2c7c-2ad0-b732-e05d8a7ed7fd
 15 6a65ee2d-9715-8b2e-8f1b-8f14e0742256
 16 e5883f06-2c8b-6820-bad7-65f6ff3ce39f
 17 0fbc0f02-cce3-647c-b8b5-224eaf3cb919
 18 7249c4f1-38d6-71cb-b54e-bd563c7ed8f3
 19 3e384d0e-efc5-767d-963b-58d184467e67
 20 058312ef-fd2d-76cc-bd9d-adb76dcb54ea
 21 7c742188-c971-02e0-9649-ce80269238f4
 22 1df193ab-a7ed-46d6-b061-e5a55ad79aa7
 23 b7bfcacf-d810-06f2-a7ac-cb33be7daf36
 24 7f60fa80-8d88-3646-825b-9d3927613901
 25 b0a73fad-545e-2a8c-889b-a9ff012a5152
 26 09c6143c-6167-69fa-9dea-3f572ca9ff85
 27 bd2d15b2-a677-23d2-ab7e-b6b9e8691195
 28 6ccd8609-09c8-3280-8e73-f9ff7f264474
 29 0e3f971d-99f9-0e4c-be62-a264fd2abb7e
 30 43d44cb8-1cf8-09ce-9727-34c4f95943d2
 31 fb73ab19-0637-2f55-a024-5686ce5cbb06
 32 3701bd2e-a3fe-4734-9708-4fb644164c20
 33 929be564-5e47-6530-a998-1d3a2e147169
 34 510d105c-a7f2-6877-b017-f520b51d33e2
 35 a387977a-e8ad-8393-9a80-e3e46bbe91f8
 36 6cbbc7ef-1b29-827d-a921-9444f6161c0a
 37 1fe6c4b0-2949-33b0-85d1-4a2dad332c1c
 38 e22df3de-91a0-713c-991d-9e6884c0517c
 39 a793ca9b-566b-7554-ac36-ec899d282bdf
 40 7e5824da-c507-7273-b159-fc27b804587a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8551850643272286677704032623002466883777. Exactly this sequence comes out of new Random(190).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 327 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results