A858DE45F56D9BC9 archive

201210062304 112m9g

explained decrypted filler

3DES(name+title) ECB, 25 GUIDs, seed 586

Metadata

Post ID
112m9g
Title
201210062304 → 2012-10-06 23:04 on A858's clock
Posted (UTC)
2012-10-07 03:04:42
Timezone
UTC−4 · title 23:04 against posted 03:04 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,616 hex characters · 808 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210062304) = 80bbe02d2caca19a10cd18580e11ee85 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
25
Filler GUID seed
new Random(586).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
345 · predicted N = 25 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,616 hex characters = 808 bytes = 101 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210062304 (name+title). Key = MD5(password) = 80bbe02d2caca19a10cd18580e11ee85, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 25 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ddad855c-309b-7809-a4ed-3fc183466a3b
  2 d9c375d8-1538-61b2-b3ca-21553fe0b68c
  3 534ca7be-4d70-3fc2-b83d-e591dd261487
  4 5fd57b65-7f8a-50e2-9e58-c0466190dc1b
  5 3b862bc1-0a99-616b-a7c8-79e79e5dc5c7
  6 fccab790-4de6-56fc-9fa6-817f14c88d77
  7 ba56489b-29b0-4a06-bcbc-9cee62e69259
  8 db4125f5-b215-3917-858f-e599700a2ed8
  9 3f315df7-087f-4f86-82b4-5ef01c8bcac5
 10 d52b58cb-425e-311a-99a6-4510d6ddc85f
 11 d8f695ef-cdcb-0f58-89e8-e0fa3a4428cf
 12 2e8c2def-7856-8c45-ac4a-a9326f7a2ecc
 13 1bc7a125-a4ea-44be-83f5-35bf9c346ea0
 14 ebada567-93f7-3ece-a59f-d699ba11ac66
 15 06e19d6b-146d-1cdc-b58d-8148cf96804e
 16 289e4088-66dd-8a2d-af67-7616ccb84728
 17 6fb462da-9bdf-1128-bc90-7094b79a108d
 18 7d96fc59-3ba2-256d-84e1-7f49b61b599d
 19 9297222c-57df-46e9-b891-c0e3bad6e028
 20 41954b48-0ff4-1e70-a3d4-b9a113619cbd
 21 7c5ec0ac-1918-694c-aa0f-d808a8a9521c
 22 43421743-3122-5e63-8c7d-ddb70a83a02b
 23 26df3b71-a534-067d-a90d-1bcf92fe8d59
 24 bd9402b5-a6f1-63fd-ad93-6a0f69ed5da0
 25 136cc4f3-2034-1d2c-9e53-9f23c24bfcde

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7635654343084318124165061. Exactly this sequence comes out of new Random(586).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 345 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 25; the post has N = 25 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results