A858DE45F56D9BC9 archive

201210071025 11362x

explained decrypted filler

3DES(name+title) ECB, 26 GUIDs, seed 880

Metadata

Post ID
11362x
Title
201210071025 → 2012-10-07 10:25 on A858's clock
Posted (UTC)
2012-10-07 14:25:07
Timezone
UTC−4 · title 10:25 against posted 14:25 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,680 hex characters · 840 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210071025) = e99e09d5211a629bd28a82c21e95ff7b (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
26
Filler GUID seed
new Random(880).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
379 · predicted N = 26 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
9 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,680 hex characters = 840 bytes = 105 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210071025 (name+title). Key = MD5(password) = e99e09d5211a629bd28a82c21e95ff7b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 26 GUIDs as hex (shown below).

Decrypted: GUID list

  1 fddbb2c2-7a05-49e5-9b4e-20d68aae01ca
  2 7d9455ae-4835-04f7-8dfb-e310e1ff3ccb
  3 4a63e1e9-c6d5-7855-bbb1-5ebf21ec9287
  4 3c6dbea5-9255-34d8-b22f-02e941b43f8d
  5 d7728288-2331-4cce-8acf-72c33694ab75
  6 54d26cc8-c958-51b2-8ac7-911168884e65
  7 61fd7feb-f90e-1f9d-93bc-739a2554124e
  8 2f268c39-e81c-8442-847f-7711a59917a8
  9 37674bfd-fe89-7ee1-8a1e-b475cbed0a23
 10 b4c45c97-6a84-611a-8d18-94a3bf4be936
 11 85eaaa54-3899-5d10-9b22-d41968257549
 12 c9d7d788-36a0-4bc3-a303-0cc9c43d359f
 13 d125779a-7041-563b-89c4-acdbc45467d5
 14 365358f2-355e-271e-9d8c-270ed24adfe6
 15 27a9751b-1225-8e5c-8028-5700a2aa4d88
 16 03127c9d-623a-5e9a-8be2-91f63d3ea19b
 17 04c7d2c5-cf0d-7a89-9e1f-70cfbf8666ae
 18 4cc2b939-59bb-5c6d-ad5e-d14b82aec01e
 19 768e3b25-d3fa-4b4d-946d-29a9977cfb72
 20 42aa12bc-60e5-0c23-9b11-4f753ad7a2e6
 21 bd545975-7277-627f-8d4d-656318b81fa0
 22 743b1857-6aff-6fe5-845e-4a3595b3c758
 23 cb11f572-1d5a-6185-9377-87dc14d85fde
 24 10fe9d86-3bb0-4cc9-b70b-667af346b658
 25 4d98946b-28a2-8af5-8890-fc3730f6dedc
 26 f2f78221-324e-4e8e-8a9d-25ff12b96ecc

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 40734518765452857540666484. Exactly this sequence comes out of new Random(880).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 379 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 26; the post has N = 26 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results