A858DE45F56D9BC9 archive

201210071125 1138lt

explained decrypted filler

3DES(name+title) ECB, 27 GUIDs, seed 735

Metadata

Post ID
1138lt
Title
201210071125 → 2012-10-07 11:25 on A858's clock
Posted (UTC)
2012-10-07 15:25:09
Timezone
UTC−4 · title 11:25 against posted 15:25 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,744 hex characters · 872 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210071125) = 01827561cce4165369be79e29e9cd6e5 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
27
Filler GUID seed
new Random(735).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
382 · predicted N = 27 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,744 hex characters = 872 bytes = 109 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210071125 (name+title). Key = MD5(password) = 01827561cce4165369be79e29e9cd6e5, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 27 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c7bf0738-addb-6ea6-9c30-316ba5efc116
  2 ed0a4d06-d4a7-4256-859c-fb317f9db575
  3 bab7743e-5e88-496f-a226-27e430d54691
  4 7edc90d8-8f3c-365d-92df-d0a03140fe64
  5 a1b3a5af-d34c-08a6-8ca5-d0043396ac08
  6 bcb563b1-8b57-705a-9c24-6068efa8e46d
  7 ac41630b-3ec9-2829-9b73-3f00ce3b84a5
  8 2699be11-e6ea-1879-8efc-1d5d4a147dc4
  9 49e080dc-aac8-834a-90c1-bfd7617b4a09
 10 ee2742cc-ff2d-29e0-9726-0f56d68e1e71
 11 b02c7b2c-e979-7ab2-83bb-9cf028459dbb
 12 63045180-f332-2d1a-8c4f-3cc960fccbdc
 13 e8462d5f-9577-8593-8644-5f9b16d1ff60
 14 48696168-baa2-74d1-a1e1-6061aba892da
 15 b4a31d87-3aea-4207-8639-e8f3857206c4
 16 a4865bc2-27df-0bd5-b276-a5be788e3f97
 17 a1c195a5-2d00-789c-9d36-601f7520442b
 18 d68b5b75-3a29-6fff-a9f0-c1950f720196
 19 9df99190-b0df-5dcf-9fc0-f25cc3c38194
 20 9348a96f-aa41-80ef-bd00-6b1cce6c5bf1
 21 34ea462c-7ab0-4f13-814a-c5f3c7292d44
 22 f0191aa3-b9e0-1439-b060-1f3a2682f23c
 23 b85cad33-2437-13a9-a713-042bf8435bb1
 24 d24e2a22-1067-7e11-a3ac-4af703231880
 25 aff75a63-1018-6c5c-ac24-ecec427642f3
 26 fc3d3bf0-8a4e-21ac-8bc1-d88bd5cb2d4a
 27 a6225aa1-eec2-743c-beab-98abc1e8a63b

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 644307218272874076584117627. Exactly this sequence comes out of new Random(735).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 382 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 27; the post has N = 27 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results