A858DE45F56D9BC9 archive

201210070404 112x6k

explained decrypted filler

3DES(name+title) ECB, 32 GUIDs, seed 717

Metadata

Post ID
112x6k
Title
201210070404 → 2012-10-07 04:04 on A858's clock
Posted (UTC)
2012-10-07 08:04:54
Timezone
UTC−4 · title 04:04 against posted 08:04 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210070404) = 9545160638f36b1e0cc0b34de8dea21b (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
32
Filler GUID seed
new Random(717).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
360 · predicted N = 32 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210070404 (name+title). Key = MD5(password) = 9545160638f36b1e0cc0b34de8dea21b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 6bd8fa40-0961-2eca-9bb2-488cc322fa18
  2 df0a629d-6733-18e8-9080-0f8ef69ba387
  3 2884ae2a-7871-88e2-82b1-965a7af32bc4
  4 142d19b0-da29-553c-a86d-1923457b87a4
  5 4d18a658-52a6-8da7-a138-cc158022a6fd
  6 1f0bba04-45ae-1111-9522-a09f03d1a2c3
  7 233c3dcb-df2e-179f-b26c-6e11c87cd157
  8 c8dc3a62-72dc-14db-bb4a-77c34b243ac8
  9 74d2c4d0-8fe7-6229-90f6-57b3b73fe3ed
 10 f54699c3-2b02-6b7c-a15d-acdfc91974be
 11 041940a3-c6f3-49d2-8891-c130ec53f4c7
 12 55d2a681-7920-21a6-b7eb-a8616df9587d
 13 dc22f007-e880-4ff7-affa-119e01f5590a
 14 bac42ae5-26ca-4e84-b4dc-0c11874f3c19
 15 a2b34e5a-03ae-7fd1-967e-b0f3f3009845
 16 c340aa5f-e043-7d9e-883e-b1d5b238c8a8
 17 9bb5bec6-a321-211e-a1d6-381c476b90ac
 18 f8e402b9-b8b1-46b2-a802-365a3d5ec26c
 19 c3fb67a6-3c68-0a66-bd3f-bd973c28cc21
 20 22201146-49b5-881e-a88a-be9ed2571139
 21 83f13e89-ae26-0bde-bc25-16c2419359e1
 22 08b4b139-aef9-603f-962f-c56b5d81aa7a
 23 320e6968-5f0d-181f-a60d-0ccedc6784b0
 24 e5fd6079-799c-46bf-873a-16a1e86b66e4
 25 6083f72f-e124-8ddf-89c7-9f11ea94a964
 26 d5ddf62f-7649-672e-9100-ba4602a12de6
 27 bbb9076e-afb7-33f2-926e-10d991cc16ad
 28 0c04989a-7e88-8bf8-be87-7c9d5af21abd
 29 0512365b-6858-5725-a7d3-7477eb8a7cdb
 30 75bb509c-e14f-4d0b-ae1f-0a3752cc1698
 31 ac2137a8-22e9-7344-beef-eed68d133c1a
 32 50de2a1c-432c-28a4-9af4-97d1ebbe7748

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 21858111664244772408061486385472. Exactly this sequence comes out of new Random(717).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 360 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results