A858DE45F56D9BC9 archive

201210071105 1137q3

explained decrypted filler

3DES(name+title) ECB, 27 GUIDs, seed 128

Metadata

Post ID
1137q3
Title
201210071105 → 2012-10-07 11:05 on A858's clock
Posted (UTC)
2012-10-07 15:05:08
Timezone
UTC−4 · title 11:05 against posted 15:05 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,744 hex characters · 872 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210071105) = 3b8fb2cc36bbb036dbd39a889876fa1f (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
27
Filler GUID seed
new Random(128).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
381 · predicted N = 27 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,744 hex characters = 872 bytes = 109 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210071105 (name+title). Key = MD5(password) = 3b8fb2cc36bbb036dbd39a889876fa1f, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 27 GUIDs as hex (shown below).

Decrypted: GUID list

  1 7eeca15b-1ec6-5fc9-b283-35743b1206f7
  2 b2b16507-f48e-3231-a353-6cbc0160daa6
  3 4919af0c-4b46-2474-b3e0-1b046905ce48
  4 01660bcb-133f-738e-aec3-b31ee3741246
  5 fe179fb9-a2d7-8e23-ab7a-2fc7795e47fe
  6 9432268b-7646-33b4-8e8e-71f651b6ade5
  7 910d4ca3-d9c6-2ca6-a2f3-21e9c04fd6af
  8 19ee117d-ef6b-5b59-a755-f37df4d33570
  9 9bfdc234-5e28-7636-96b3-7cf3f5a5daf6
 10 01267861-9750-49cd-80b7-135ff0a86f6d
 11 c4bf1632-1e72-56ee-aa78-9b0943c11a4d
 12 b0fe13ca-21e6-3ca9-b8fe-fbf959b16758
 13 f68fa859-b511-522a-bbbf-a6f74dfb9a43
 14 07246dde-a26c-005f-85f9-9ea05fe77b94
 15 7ae028e6-6ce5-50d3-9cf1-159b7a539626
 16 7272f9d4-2fd9-8972-ae79-2997181a2cc3
 17 ac94dcb6-a916-6bf2-86fd-4f44a286aeb1
 18 f2abe873-1741-3366-9281-4bfc94b0933b
 19 2af8e877-66fc-1be6-ab42-91fd3a9552ff
 20 874f178d-9a05-7c32-ac48-380eb730bfcd
 21 78311717-7906-78f8-9f7d-32bcfdaa70e3
 22 082e0b2e-9517-2b2d-aa17-24fc5c3f4791
 23 c9ac9a1a-99bb-5478-8154-010a09edde71
 24 0a77db05-1365-69d0-9723-6713fd945fab
 25 1226ad7e-90f3-2cb8-9bb3-e19a31e91587
 26 e7f275f1-726e-7d96-83d9-6c4585f6868f
 27 cefb605a-1a55-8f67-8806-a9c20be5c150

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 532783257453505863177256278. Exactly this sequence comes out of new Random(128).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 381 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 27; the post has N = 27 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results