A858DE45F56D9BC9 archive

201210070024 112pzo

explained decrypted filler

3DES(name+title) ECB, 39 GUIDs, seed 829

Metadata

Post ID
112pzo
Title
201210070024 → 2012-10-07 00:24 on A858's clock
Posted (UTC)
2012-10-07 04:24:46
Timezone
UTC−4 · title 00:24 against posted 04:24 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,512 hex characters · 1,256 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210070024) = 856e656938f42f54cfe75a5db0451ac0 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
39
Filler GUID seed
new Random(829).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
349 · predicted N = 39 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,512 hex characters = 1,256 bytes = 157 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210070024 (name+title). Key = MD5(password) = 856e656938f42f54cfe75a5db0451ac0, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 39 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ac445397-97e2-7e1d-9b78-dd6f2ce4cbd3
  2 b486dbd9-f6e6-0a1d-a812-ab70086125cb
  3 a8b78c4e-bce5-2149-b9ec-8a52cb5080e0
  4 f863e13b-aca2-4d26-9304-4b4be99824e6
  5 50811509-885a-47f6-9928-e227161326c6
  6 acfa6337-9e85-0eea-94d9-953cff719579
  7 a7e330a9-d93b-3459-92b4-6d6fc10dc380
  8 bcdeeca6-da2e-3084-b8f3-0e6e924484eb
  9 1d2a6147-c509-4429-ad8a-32a531629e39
 10 dd0742a4-8c38-8b1c-a5a0-f484b6807316
 11 3eb78f12-3e9d-09d4-94aa-7263a2d7794b
 12 5ca8d645-3492-685c-9931-ba8790e83553
 13 353479b4-ca09-4e66-a727-59f6a5207379
 14 320e5abc-a68b-6a9a-aae0-e4dec020bd9b
 15 ff4f3a49-50f8-2bcf-9e2c-182447f66f53
 16 349f8efc-8c47-6f6a-8932-ee7da973ed95
 17 9b655435-6f72-3959-b618-a139288ed3c6
 18 260e8907-314d-803d-a3c2-a6eefdfc1afe
 19 278ad5e4-ca8e-1f9d-8b01-8ae253d818a2
 20 e0d701a5-2081-257d-8496-9ffe156e7624
 21 af01f6fe-d79f-8696-9988-78199176957b
 22 614b003a-e590-2564-9a93-bbaf183ad1af
 23 9f193dd8-6b6f-0529-9380-50e7c61479de
 24 3910b38a-df12-508c-802f-813fa7ea54ac
 25 2518b25a-0558-85cc-904c-1cf76e561b51
 26 43e0cd56-6aaa-6516-80c1-a71b756bb2e3
 27 a05a6c20-3835-631f-acf5-43b3a990011b
 28 ff45a474-9dd6-3d2a-a62d-39f56f313893
 29 5100c508-a40d-4a84-92bf-7abe2f7f3bc8
 30 1c52f2c0-4219-69dd-99f4-0f917bcea019
 31 05ed40c3-a214-2c3d-96e6-3b37f561a859
 32 dd4f9401-0578-7e72-beba-ed0a49866739
 33 c085977a-a946-5af9-abcc-b63353df125b
 34 b4803263-0b57-6582-bad5-255d9db6b76a
 35 00c344a4-41bc-1a40-a432-3c451b73f10e
 36 0ac996f8-02f5-68db-a736-995bb0b588cc
 37 6540153d-5ed4-6d1f-86b6-4b43577c6070
 38 e74b3d3b-6436-39d3-9dd6-b21ab6e452c2
 39 fd2446c6-bad2-2548-8ac0-d4edf7b6423f

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 702440334806462638128205866346275616632. Exactly this sequence comes out of new Random(829).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 349 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 39; the post has N = 39 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results