A858DE45F56D9BC9 archive

201210071805 113u5b

explained decrypted filler

3DES(name+title) ECB, 30 GUIDs, seed 464

Metadata

Post ID
113u5b
Title
201210071805 → 2012-10-07 18:05 on A858's clock
Posted (UTC)
2012-10-07 22:05:27
Timezone
UTC−4 · title 18:05 against posted 22:05 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,936 hex characters · 968 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210071805) = 312627d22854adc6c4a8f9f03a86fe44 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
30
Filler GUID seed
new Random(464).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
402 · predicted N = 30 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,936 hex characters = 968 bytes = 121 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210071805 (name+title). Key = MD5(password) = 312627d22854adc6c4a8f9f03a86fe44, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 30 GUIDs as hex (shown below).

Decrypted: GUID list

  1 db5bb1ee-072b-1d8a-bd1b-23bec309b6a7
  2 72e05398-8a48-8882-a136-0603c2f9550c
  3 fb0f0f87-ffce-09d6-a7aa-b5328349f0c1
  4 55b91b2e-599c-5de9-97ff-09a2ba2ccb5e
  5 dfdc3e8b-cb26-698d-b26a-7b6a34cfb03a
  6 ca208ab7-4101-0312-9c28-549c5d5d65c3
  7 b3c3a123-84c1-7364-bbca-d01504ba0455
  8 c1da60bd-80b8-2daf-9306-a86a481f5884
  9 ff6fe32e-f679-36f3-aa38-788eb0ea76d2
 10 6f6b47d7-aafd-3c0b-a4d3-85f60e8f0f8c
 11 d1496357-ce89-1ed1-b3e5-e05213fa2098
 12 abfb513e-c7d1-6f07-8414-2b0a05159fb8
 13 0b9dab17-0421-5bb8-aacb-809005a903e8
 14 c3ce8a21-5c16-73ee-af2e-2cba38bbe3fd
 15 28808c40-79a8-6dcb-ba2a-b3c426ce69f7
 16 d34292c1-966e-784d-bc8e-a0374906f6b9
 17 c37ec504-e2a3-8f50-82b5-b44afc76cbcb
 18 4c5dde2c-e721-66d7-9b24-070a8c8ea899
 19 99cc0550-050f-2ace-a6be-a37a9cbfc3ca
 20 34f65481-fe8a-89d0-8e97-6d990085ab1b
 21 29ef7820-1bad-46e5-9cf3-a1f964397131
 22 05b57c93-5f70-6402-bd05-bae6a4e8599a
 23 4965c5f1-e024-3b32-9e09-5a7e8bef6fa8
 24 5e6b76df-121f-15ba-b421-faf59b866f49
 25 b613b7b2-86c3-1a19-a599-7ae3ca10df0e
 26 fe71be23-8940-88ec-beab-1bde4f719802
 27 e1454b37-308c-7ca6-8b62-d57f6cb721a9
 28 414fb6c3-e50d-141e-90f4-aa74edd31f4e
 29 f2576b0d-1c94-6239-90de-12d10df074b5
 30 2fbbae89-42ef-690a-a2ba-7d96b89f6306

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 180560723316576786284631187166. Exactly this sequence comes out of new Random(464).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 402 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 30; the post has N = 30 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results