A858DE45F56D9BC9 archive

201210061724 1124j8

explained decrypted filler

3DES(name+title) ECB, 31 GUIDs, seed 739

Metadata

Post ID
1124j8
Title
201210061724 → 2012-10-06 17:24 on A858's clock
Posted (UTC)
2012-10-06 21:24:25
Timezone
UTC−4 · title 17:24 against posted 21:24 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,000 hex characters · 1,000 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210061724) = 67501a29ce7cbd68116110924115801b (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
31
Filler GUID seed
new Random(739).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
328 · predicted N = 31 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,000 hex characters = 1,000 bytes = 125 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210061724 (name+title). Key = MD5(password) = 67501a29ce7cbd68116110924115801b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 31 GUIDs as hex (shown below).

Decrypted: GUID list

  1 db04df1d-d78a-757a-8445-4c0829c4d2d9
  2 95703bcd-9e1e-57b2-a064-9b38cfe6f5f7
  3 0717e990-362b-2894-8870-cc337c57aa03
  4 f7703683-0f87-283d-8841-3c33ae134f77
  5 7973d1a7-9d69-7447-a693-bb44239781f2
  6 cfb749fe-ff15-39f7-b667-95a74853a11a
  7 7ecc759f-5be6-072a-814d-5d747b07b2f6
  8 66724e26-23f1-14bb-bd19-c9f978012868
  9 a449fb15-15bc-39a3-a69f-37e6afe9c7aa
 10 5b110674-8c0b-796f-9dcd-f45cc222eb9c
 11 ec50fa6e-a650-68ff-a6d7-20b36178d07f
 12 039c292b-2538-3d50-b713-9d637328986d
 13 5497dd1b-9a07-5fdf-b773-5fc3b55ed035
 14 c03f87b7-2752-81b8-9f22-8cc8f7bf05f3
 15 154382f9-0efd-297d-ba8f-02a09a24e53c
 16 2c0ffd76-1152-41cc-9501-359f1c6fd4b4
 17 403e05e8-cfb3-4ac2-acd8-26c3689d5b36
 18 561e9f5e-8e3d-1035-9471-a38c50eb16f2
 19 671ca4ac-962b-6bcb-93a6-ef5b74ee06df
 20 3d4c6e52-c21e-4e48-af8d-54b5b75407f4
 21 68b63db9-cb4b-0b83-9a04-de197923a02c
 22 b75eade6-d7ca-116b-b754-05dbb06b48e9
 23 e4687514-3611-7b98-bf26-bae2c834a431
 24 7242f3d6-d899-1d6d-815f-24c1100e12f2
 25 3c2e676b-4ac1-1d6d-95a3-5043096d73f9
 26 ac6e3240-1d0e-79a2-9b33-f5eff4a4766b
 27 ade0bd38-51a1-2594-bd0f-cb2d1dc59a4f
 28 604cf260-a2fa-534a-aa07-cf978e91d6cb
 29 080b884a-822a-6d07-9f04-01698b31b046
 30 47e0d9b1-9d47-288f-b6f7-fbd2870a3c22
 31 569bf4e4-22fb-0f73-a2c4-6162c97f4aca

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7522730137635824416401711725620. Exactly this sequence comes out of new Random(739).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 328 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 31; the post has N = 31 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results