A858DE45F56D9BC9 archive

201210071545 113m68

explained decrypted filler

3DES(name+title) ECB, 40 GUIDs, seed 728

Metadata

Post ID
113m68
Title
201210071545 → 2012-10-07 15:45 on A858's clock
Posted (UTC)
2012-10-07 19:45:19
Timezone
UTC−4 · title 15:45 against posted 19:45 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210071545) = 9cc9e30b545541fdab0b27d58f32e3af (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
40
Filler GUID seed
new Random(728).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
395 · predicted N = 40 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 2
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210071545 (name+title). Key = MD5(password) = 9cc9e30b545541fdab0b27d58f32e3af, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 03ef6430-c300-0267-8f1d-48b6e36000c4
  2 38779164-8c98-3765-816f-3820619d4e51
  3 6ed78269-bfdd-5f24-ae9e-aad689ed4703
  4 b8108e05-5a37-893d-bee7-ae598631085e
  5 dba22b86-91d2-71ff-8cc5-a2f6661ebcc5
  6 14b20ca9-286d-67a2-86c2-51ed45bc6f3d
  7 1c6474da-08c6-0b9b-ba89-613c2460a585
  8 fe7376c2-14e3-62ed-9750-08b52064ff0b
  9 ab315fcb-3de6-0d98-a84e-fce4d979be42
 10 151ebc23-e30b-6250-b385-eb8d237ca07e
 11 e75277d4-5b92-5d8d-91a4-3590cda3f0b5
 12 36a4db07-4232-73bb-9c43-97f796e784db
 13 ba8c2dd8-1451-0635-8b71-96a8f7126c90
 14 8df8e8b3-e970-15ec-a7a3-31dc5dbaf836
 15 cf7b017b-76f8-55c1-bf46-40292877ad85
 16 cee80088-f4f8-6055-813f-c0baa3ae2f50
 17 ac673acd-3384-7752-8b79-76c5036b36ca
 18 177459d6-71d6-3b72-99e3-9feeb9a75e9b
 19 8be289ed-f40c-334b-87e2-e4a10b5f7621
 20 bdea8e59-3f70-1dd0-a045-63b6dec51b83
 21 aabb07f0-2496-41e9-a0c0-55a54b28e64c
 22 8b2b5de0-b63e-4be0-9f31-ce8073f3aad1
 23 8b5d194f-3897-012a-8c7f-db2ff42250a7
 24 1afdce87-8f3a-3e7b-b554-86fe7647be4c
 25 876be3ed-347f-0cf2-9b9a-ebb1f1b39cea
 26 46b1acb7-0763-6a22-a8c3-caf36f1deb00
 27 cadb9e60-7139-7ed8-afaa-14aa1349625f
 28 941f413c-295b-6154-9826-f0297995ebb0
 29 01a879d6-3dc2-5f81-8b0a-66072e2eb64e
 30 22c541f2-8025-3ed3-95bf-ff7a6cfe3ba8
 31 f24e6afd-6a76-8659-bd70-d6aaf629eb92
 32 bb9a1224-eed2-1f45-b414-aa92b07fc822
 33 0355321d-bb14-0f62-8eea-3c68cdad0db0
 34 27f9eba8-1170-298a-8376-328dd0559013
 35 8bbd31f3-0832-7aea-a82c-6a5436cd334d
 36 19eed524-4036-260a-9544-fc1b98541aed
 37 165bf24d-f37a-03d7-9e87-519dfced7972
 38 ca1c1df9-81cd-40c7-91d6-9af46bb93281
 39 7ece2f47-3e84-0893-a4fa-0c63ac0ebfbc
 40 33cbd05a-bdc6-27fa-9c5a-fc91dcadacc2

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 0358760606570156733144030676538102720402. Exactly this sequence comes out of new Random(728).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 395 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results