A858DE45F56D9BC9 archive

201210071505 113jv3

explained decrypted filler

3DES(name+title) ECB, 31 GUIDs, seed 93

Metadata

Post ID
113jv3
Title
201210071505 → 2012-10-07 15:05 on A858's clock
Posted (UTC)
2012-10-07 19:05:16
Timezone
UTC−4 · title 15:05 against posted 19:05 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,000 hex characters · 1,000 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210071505) = c9dfca9e2b71134dfeaf2d6b1f941480 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
31
Filler GUID seed
new Random(93).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
393 · predicted N = 31 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,000 hex characters = 1,000 bytes = 125 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210071505 (name+title). Key = MD5(password) = c9dfca9e2b71134dfeaf2d6b1f941480, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 31 GUIDs as hex (shown below).

Decrypted: GUID list

  1 2ea5baf9-f80c-276e-a791-b57deaedc092
  2 d9f853cc-7f14-0043-814b-374834ca5d7c
  3 2073cc51-ba36-6e92-99d8-a318988ad5a2
  4 cd9b11c4-9f34-3e0e-83ef-bafa17e8033c
  5 1d46524b-4ff9-13d0-804a-933d9853ca7d
  6 4806aa5e-bacf-7f2a-8cce-6c4803489b3a
  7 a940d027-1a21-58b2-8d79-2393081808de
  8 637042f4-912b-05e1-9ef1-ac77cf5d7a33
  9 16212c43-f134-4adb-95a1-56f2c68f53a5
 10 f037d330-e3a5-5131-8ee8-aff6c393ba60
 11 331d235e-1445-746d-8539-241e0a236b64
 12 ba120653-ac4e-0e43-b488-57cdce1245d0
 13 935930fa-f560-557d-b468-e5a3424713fc
 14 1b9fc254-2d85-7234-996f-414090680584
 15 f74ef2c3-dd3f-04ee-9d48-ad0f561f0301
 16 6317c151-ff9b-058b-b1ac-6a51f66907b9
 17 bf081a40-7d80-8f04-ab31-a1b18eca9b4e
 18 5fbe433c-4ccb-5a27-bd11-e94718f06263
 19 f84758b0-85fb-10f8-93ff-799f18732139
 20 324bcbca-573b-2471-923d-d74e273dff52
 21 95793562-2d3b-1661-a261-41dcaad45e01
 22 2bc0c824-af5b-544e-b83d-ac93e903091e
 23 bc1e7587-c8d1-6557-b752-2c2725981c97
 24 1bae2211-d5fd-447e-8fe2-36631f37e0ae
 25 abd48fe4-eccb-7038-a93c-9228c03be5d1
 26 6faed5d1-f3bb-3b0f-ac62-696b4c3eda47
 27 6cbbe24d-17e6-84f7-9d72-42877739fd2f
 28 562d72a4-2ef2-24d1-9217-8282c3b429fd
 29 4aaefd8b-1abf-2065-83ec-0c6a60b50c57
 30 be67a176-c87e-83c1-9ec3-11a533cfc062
 31 01afaf10-fe5a-4822-a062-af7c0f8d95ad

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2063175045705700851215647382284. Exactly this sequence comes out of new Random(93).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 393 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 31; the post has N = 31 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results