A858DE45F56D9BC9 archive

201210071225 113bg1

explained decrypted filler

3DES(name+title) ECB, 27 GUIDs, seed 655

Metadata

Post ID
113bg1
Title
201210071225 → 2012-10-07 12:25 on A858's clock
Posted (UTC)
2012-10-07 16:25:11
Timezone
UTC−4 · title 12:25 against posted 16:25 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,744 hex characters · 872 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210071225) = 52d7659e5bfa5d7e38de0d88529820d5 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
27
Filler GUID seed
new Random(655).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
385 · predicted N = 27 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,744 hex characters = 872 bytes = 109 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210071225 (name+title). Key = MD5(password) = 52d7659e5bfa5d7e38de0d88529820d5, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 27 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d2d07d0d-4c08-8316-902a-fc1abc0afd4a
  2 3fc14338-c164-0fd0-8088-36c19e90ff70
  3 a5a64023-dec6-5491-874b-edfc41664e64
  4 5b7b810b-3c7f-3b9a-9060-cd4c3abfbc7b
  5 feebaf16-d1af-8681-8dd3-ca536fd72766
  6 068f1b41-39aa-8766-a3af-6a0bdeb596ce
  7 b8342249-68b7-3d77-b885-ce5060ef2497
  8 f940df9d-4bf6-01e6-b534-71816b48970c
  9 120deb91-cfcf-0c63-b92c-61a505199234
 10 bbe5628e-4894-78b8-8a80-5191401454a1
 11 4d4543a9-6ed3-7e6f-8116-d460d1c23f9f
 12 a7d36d6c-c365-7842-a5c1-c2524b16ebe5
 13 f093d644-d44e-8b8b-96cd-eada9f0972f3
 14 d69fc156-8ae8-28b5-91e2-84447c62aea4
 15 d518f42c-66ae-4ed5-884e-85f05fcfc271
 16 02cacab3-5932-06b8-9715-b3efb172b39c
 17 0f085d7c-e5fb-1c21-a20c-e8a99a98e76d
 18 6d06ea88-fbe4-0bcb-b2a5-1ffbbf4254e4
 19 b104a9d3-d66e-3c3b-bc8b-bc231492faa9
 20 d62a9be6-35b5-8b8e-ae05-c2cb55ff6716
 21 db1e3d6c-fc46-703d-a07e-aeceace9eaa0
 22 09da4005-0d35-435b-9a4c-00506241cc8c
 23 5da53252-72a2-6ac8-a4d3-a1a8271bdfa8
 24 b7b89e07-50d0-76c6-ba61-9a9bb5d8adce
 25 51f52e7e-9497-81b6-86ad-b96ee7387af9
 26 8d8af3ef-dbfa-7178-ae59-5372f6fa9155
 27 59838501-623c-0a15-a16e-896b3b10355b

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 805388300777824010387467870. Exactly this sequence comes out of new Random(655).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 385 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 27; the post has N = 27 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results