A858DE45F56D9BC9 archive

201210062344 112o6b

explained decrypted filler

3DES(name+title) ECB, 35 GUIDs, seed 393

Metadata

Post ID
112o6b
Title
201210062344 → 2012-10-06 23:44 on A858's clock
Posted (UTC)
2012-10-07 03:44:44
Timezone
UTC−4 · title 23:44 against posted 03:44 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,256 hex characters · 1,128 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210062344) = a16f5d708c8da54fdac302bcd4dffd9c (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
35
Filler GUID seed
new Random(393).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
347 · predicted N = 35 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,256 hex characters = 1,128 bytes = 141 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210062344 (name+title). Key = MD5(password) = a16f5d708c8da54fdac302bcd4dffd9c, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 35 GUIDs as hex (shown below).

Decrypted: GUID list

  1 cc38b5fb-6ed1-03fd-a715-e3ae4a7b469b
  2 ac553012-53b7-154b-9240-9ba889b0baf1
  3 92ba687b-b7ae-4d36-8dd0-9b76e9ad8f0c
  4 dcaf8dd0-b81f-398b-9116-8a7081ef328e
  5 c3956080-8cd5-5a07-be3c-989c63a896a0
  6 96d6a27e-17ff-05e5-a708-1028bb4f337d
  7 524968f2-aacd-8311-b23a-e19861d8e39c
  8 7ae8dcf8-d315-5b68-b12e-515e93146ff5
  9 c8464fbf-165e-5a51-bc2c-0f295a6b2549
 10 37cc1c18-3777-1b3a-86f4-d6d2e9bb4f6c
 11 6b33f07f-cb63-71fa-b9a5-34b63c2c5315
 12 ba6ac626-eb7d-2e48-a8fa-e214c51d002a
 13 77e45cec-5b86-79cc-8419-aa2d3152ad99
 14 321e6a59-11c4-807c-ae9f-2000211c8517
 15 ce7e031a-8029-0edc-a032-2af6c15dc397
 16 7122c074-62a9-4e73-a337-8b4f016246de
 17 f12d0828-73c7-01c5-9410-c507603b1361
 18 f5b7c3e5-38a1-55eb-a283-bb3c23e08bb0
 19 44e14db9-8ae9-256b-93a5-98981cb7444c
 20 31d76de7-dd93-419c-9922-68757a00af42
 21 622e4a2b-f008-0217-a456-123439ebc310
 22 318726bb-68fc-242c-9ed5-7c030eb47187
 23 309f5060-9762-3ff2-af61-96691f16557a
 24 126bfdd7-b72a-22bc-ab63-f4ea2c21d379
 25 1f35b369-0a11-1de9-922a-1fca5a7c4c1d
 26 e29e3b15-e013-2949-9978-eacae6f5d025
 27 3c48c7d3-4139-78b0-82b7-82ef1e972dc2
 28 9ef877f7-96e5-19f9-8faa-74fc9f10ecee
 29 b10d61e3-4b0f-0992-b83b-2d572c2cc0db
 30 8674ecc6-781c-5164-b18a-2ee3738eca47
 31 9b3d8ad5-94df-285e-93ee-c4e3d82a28b1
 32 0203525f-b7bd-8fd3-9176-bad86c8d7275
 33 9ef177ca-afc8-29d3-a191-4127d02f4d34
 34 447b8044-9318-7df6-82cf-8c25851448f2
 35 08d0550f-9ad3-7975-a14d-46e65b0b4730

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 01435085517278040524023212710528277. Exactly this sequence comes out of new Random(393).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 347 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 35; the post has N = 35 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results