A858DE45F56D9BC9 archive

201210071345 113fjv

explained decrypted filler

3DES(name+title) ECB, 38 GUIDs, seed 179

Metadata

Post ID
113fjv
Title
201210071345 → 2012-10-07 13:45 on A858's clock
Posted (UTC)
2012-10-07 17:45:13
Timezone
UTC−4 · title 13:45 against posted 17:45 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,448 hex characters · 1,224 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210071345) = f8ebb9c8ff7aa068e778b1ec239ce65b (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
38
Filler GUID seed
new Random(179).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
389 · predicted N = 38 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 1
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,448 hex characters = 1,224 bytes = 153 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210071345 (name+title). Key = MD5(password) = f8ebb9c8ff7aa068e778b1ec239ce65b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 38 GUIDs as hex (shown below).

Decrypted: GUID list

  1 48de5e87-15ad-260f-8530-2bee20c9c2aa
  2 e248cacd-4927-368b-8750-11e4d6d37510
  3 77ae99ee-ef36-7aea-80be-94b3242f0ec0
  4 800f0696-66eb-65ec-8d95-482b82097833
  5 3efdbe8b-2600-093f-9327-617bb053c21f
  6 92669821-81a8-8ee6-8b09-c97011a023c6
  7 d3520604-501b-0011-ae1e-562385d21c47
  8 d689b9a0-a9fa-281a-8faf-47c1d7c52837
  9 ce77f412-23e4-1bf8-88f2-5c050d4804b0
 10 1a0d3212-42dc-29d6-9783-1a79626a11c2
 11 bc1eaec2-1589-1cd6-b129-4150a0cd906e
 12 c55acf24-c004-134c-a82e-7b856e124af9
 13 90e65d5b-d834-6d18-b4b7-fee64423e762
 14 29793026-7db3-5438-b3d7-11bf65e138a4
 15 ec8c5e8f-415d-2816-a6e4-c8b4b40f6765
 16 d76ca59c-55ac-77a0-8c1b-549973584bcc
 17 2ca9941d-2c34-020b-93c0-de8573ad4def
 18 eb09d7dd-c8e8-8d50-944c-9a77b50fcb8b
 19 0a16e716-365d-4d6a-ac6d-ea41e2288e2d
 20 771f4228-485f-51b9-b181-a0ab9cd3324d
 21 af91a155-4be8-5e7a-9dee-0e6f9760f3c5
 22 3683e8bb-1aae-666c-984d-7a76ee2c0002
 23 a480c61d-f200-2112-b5d8-3ba4c2afb72f
 24 f792d12d-bde9-585f-9334-ff75a67f3fdd
 25 5f5b79ff-aedb-21d9-bc85-dd2637efd102
 26 856b183d-48dc-53b8-a76d-d34de888b5a3
 27 89199221-482b-75dc-9101-e06549b74c87
 28 4f838fcc-9a45-5ba6-991a-bdf8d90d9659
 29 a4e3b6f5-fb07-889c-8ba3-0a1cd0c25d26
 30 39be3e90-3971-2f59-8b48-12180166e6bc
 31 e160b358-dd4f-2682-93da-22b758f92d0a
 32 d12d7d50-2982-521e-b175-47f5c7240e40
 33 dea419ee-9ac9-2074-b0f9-2ac5638a77fc
 34 79dd9c9c-1d63-4c11-9c94-54a5d10449f8
 35 c480f565-38f6-187f-9ac8-2795b5d91a3f
 36 f2b8db17-d503-4634-9dac-d196a71facfc
 37 aeae204c-277b-2bd6-ac7b-b36ed9ddee6b
 38 9cdb6684-1948-3008-940f-2b40b9ae9f4b

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 23760802121165270845562525758225241423. Exactly this sequence comes out of new Random(179).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 389 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 38; the post has N = 38 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results