A858DE45F56D9BC9 archive

201210070805 1131zr

explained decrypted filler

3DES(name+title) ECB, 41 GUIDs, seed 559

Metadata

Post ID
1131zr
Title
201210070805 → 2012-10-07 08:05 on A858's clock
Posted (UTC)
2012-10-07 12:05:02
Timezone
UTC−4 · title 08:05 against posted 12:05 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,640 hex characters · 1,320 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210070805) = 04a4c207f3ce61dd540c0a1ac66da0c1 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
41
Filler GUID seed
new Random(559).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
372 · predicted N = 41 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 1
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,640 hex characters = 1,320 bytes = 165 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210070805 (name+title). Key = MD5(password) = 04a4c207f3ce61dd540c0a1ac66da0c1, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 41 GUIDs as hex (shown below).

Decrypted: GUID list

  1 2afb5baa-64d8-6cc5-9e5a-1376dfd23f3b
  2 d458e2b3-83f9-7dc7-8307-515597b521bc
  3 4e8773d6-c598-4f29-99dc-2ee8b676a32e
  4 787d4021-9da5-7986-b3bf-cec8384d07aa
  5 bdb0605c-f375-5fb5-ac86-b1afd709fbce
  6 d8ab029a-3e9f-06c6-8955-b4ee787ce95b
  7 a0ef25a2-5731-3ee8-95b0-a37f39ba7458
  8 9288efe3-ce10-7d22-a369-01beec62c5c1
  9 c4a7baba-23ac-10fb-8463-c315fdb5af8b
 10 68644ff8-e424-3eb5-a778-11a61970a902
 11 73b09902-2620-1d89-8e75-684a03e432e3
 12 4627051c-3179-7260-8083-3626ebb80810
 13 875623fd-4fad-81e3-8f97-70f09ef2d284
 14 9cfe6305-fc8f-2e8b-8687-3c9deb02ed0a
 15 d3b4f618-9944-2616-b1e9-40c860ba067c
 16 569ac789-d7ed-1d62-92c6-ae963a22c6b4
 17 8973d794-2c27-702a-939f-1e5fc94cae84
 18 dccf44df-98b2-591a-a3a1-ec560d0d4386
 19 e8045407-344b-70a0-b3fd-27955873a52c
 20 1d397560-c6be-6ea2-83ae-3e1704908301
 21 ef76c002-09c6-0312-bef2-faee7b69c4ba
 22 ff69b8c6-2085-8f7c-bfef-a9b6c6732cb4
 23 675d36ef-0526-4273-8a78-45bf98be7cc7
 24 1d877357-f8db-21ab-ad86-7825459e5499
 25 a8917835-62e5-4e67-b358-5d76c874718a
 26 82918c18-9579-0ff1-9948-7b29028db17d
 27 51497f64-e789-46dd-b1b9-a32629cc1036
 28 dcccd1e3-0591-01ae-8d56-2fab92056d10
 29 5cdcf6d1-e137-81e1-b625-ba0dcb2c3bcd
 30 55148e92-ab16-20c3-bc58-a456a7dc92a1
 31 88fde26e-3146-5056-b43e-359a663c15ff
 32 a8de622e-d476-61f8-8fac-f8a6a4e6f0ae
 33 b0eee091-4d38-0d19-a187-df7f03b4b154
 34 372f4a43-a2a2-0a58-ad51-bc1e00890bf9
 35 6fde9040-55a5-7b70-a5d1-7321a9592e19
 36 22319bb6-2cfc-87ac-8777-94b4e916a9d4
 37 372178ae-5ea4-0606-b245-7fadcacaea4d
 38 1a0dadca-e1aa-3bfb-86b6-dd9fa6ad38be
 39 a37eddb1-8208-0e2d-9cf4-28610b62d6b7
 40 c65a93ca-065e-37f5-9071-01a6d8c2653f
 41 dd1c4c7f-8f83-5467-977d-af5aaf2aecc7

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 67475037131782217576084240408256007803035. Exactly this sequence comes out of new Random(559).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 372 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 41; the post has N = 41 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results