A858DE45F56D9BC9 archive

201210062024 112efx

explained decrypted filler

3DES(name+title) ECB, 27 GUIDs, seed 98

Metadata

Post ID
112efx
Title
201210062024 → 2012-10-06 20:24 on A858's clock
Posted (UTC)
2012-10-07 00:24:36
Timezone
UTC−4 · title 20:24 against posted 00:24 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,744 hex characters · 872 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210062024) = 86560acc892dd67e1a089ec911fd151a (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
27
Filler GUID seed
new Random(98).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
337 · predicted N = 27 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 3
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,744 hex characters = 872 bytes = 109 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210062024 (name+title). Key = MD5(password) = 86560acc892dd67e1a089ec911fd151a, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 27 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9c1ced6c-20e2-8d56-aaf5-1d81ac3dab2e
  2 f9f34901-bd8d-5053-bd6d-39b5da102f9d
  3 50caf17a-f772-25ac-a63d-31005118ed83
  4 f13ca309-26a1-4a48-b49f-07da0d34d37d
  5 919b6ccf-ea46-405e-b627-b2902c672fc6
  6 a4a4e35e-819f-1035-bd98-5ef9f69a57b6
  7 1a8abafc-3be9-725f-bebb-a734e51fb88f
  8 5ba3ec01-d7f1-549d-baf0-73db9812a968
  9 40385029-e390-08dd-ba9d-c867828614bd
 10 e3761d0b-b2a9-3559-837b-52b41dfec46f
 11 97749f99-eac9-49bf-90d2-6208ee86802b
 12 a6f6d9fe-e470-8bb6-a60a-5f85e105952e
 13 ca24db93-74d4-0425-9b19-dfc43660d014
 14 bbdd9782-5603-40e2-bf66-eb0816334756
 15 166b5c3e-72ce-5bf4-9145-043ba6e209b8
 16 a00780ad-1b60-2142-94e6-e06e933ba1ad
 17 b300c146-bc82-0048-b726-27161d078a9a
 18 61dabcf4-fea5-6bb9-a352-23ecdf5acd37
 19 64f82ad3-0d53-256e-9bed-19af688ee9d4
 20 ae6e2c87-578e-23e8-93e0-5bbc95311f9d
 21 02da9f14-38c2-7cb2-860a-1ed0a85e09c5
 22 208556eb-95f7-8a7c-ad7e-97fa3613f927
 23 2129dc42-547d-429d-bf89-59fbdd5f6309
 24 539fa345-9dcd-22c5-9936-98068d556f20
 25 e7bc3840-a96a-2408-8a65-30d4caa4d3d7
 26 9ff3f162-bc2e-5cf9-baa8-848459403ebd
 27 e24ceef2-0c9c-1deb-bcdc-740cba129596

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 852441750348045206227842251. Exactly this sequence comes out of new Random(98).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 337 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 27; the post has N = 27 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results