A858DE45F56D9BC9 archive

201210061904 1129wc

explained decrypted filler

3DES(name+title) ECB, 29 GUIDs, seed 569

Metadata

Post ID
1129wc
Title
201210061904 → 2012-10-06 19:04 on A858's clock
Posted (UTC)
2012-10-06 23:04:32
Timezone
UTC−4 · title 19:04 against posted 23:04 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,872 hex characters · 936 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210061904) = 60b84f1440759a8eafd5e62b9574a78e (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
29
Filler GUID seed
new Random(569).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
333 · predicted N = 29 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,872 hex characters = 936 bytes = 117 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210061904 (name+title). Key = MD5(password) = 60b84f1440759a8eafd5e62b9574a78e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 29 GUIDs as hex (shown below).

Decrypted: GUID list

  1 6c3a1d12-ba3a-8543-b958-17f2bc3030dd
  2 4f7daa0f-9159-6756-b6d5-48fa13f34584
  3 01715ce4-af3a-4b02-8c8e-87b99052e193
  4 57a0a16d-8912-00f9-89ad-ad9c61e18877
  5 dd8f1857-b799-0b61-9888-4c4ce1fb2b10
  6 9c55bb7a-cb5c-7506-b443-5d182cfaa5cc
  7 35fe7818-a7ce-77d1-9f99-2421cabac68a
  8 ac3d6988-6d21-8776-b12c-5216992d4322
  9 bef9c45e-3f63-3be9-9599-239d7411d338
 10 a10e5239-be9c-0d0f-8b4f-0953854db7b2
 11 76a0ffb9-aa6e-4945-a984-88fde934c85a
 12 ac960c0b-9568-60b2-8e02-4ec184d32821
 13 831b4556-322e-7efc-96ce-44596febdfde
 14 69f5754c-05c9-4906-b4c8-31a8bf19e958
 15 cd190995-65fd-22b8-837e-7029e8c95655
 16 828f1526-04a5-3447-9faf-5d6f7c38bba3
 17 d23ef993-ad3a-0640-a4f1-3ae11275368e
 18 b2ac2cbf-5ffd-6e36-a942-e48616d7e116
 19 45099036-094b-07f3-ba0d-3afd0cab6252
 20 d71b107d-5f90-591d-bee6-17c32d4a0395
 21 09fdfbcd-ef54-3eb0-b074-8a9091636437
 22 874121d6-bbd6-4570-8c42-ac9431233f31
 23 3c8567c8-dbc4-179e-ba9a-97db529181b9
 24 2aa2fd90-432e-7640-af44-8b5042c2492f
 25 28d4e457-ba00-4dfe-86f4-47ac874926f3
 26 ac6e7bbc-0883-44c1-88a1-2607d9b6d108
 27 19301127-2125-1bc3-b6d3-a51655dd97a2
 28 689092e9-6eb7-2592-8797-bec2f4cac03b
 29 d6f53418-679d-6907-9363-43737696d724

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 86400778304674230605341744126. Exactly this sequence comes out of new Random(569).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 333 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 29; the post has N = 29 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results