A858DE45F56D9BC9 archive

201210071845 113wdh

explained decrypted filler

3DES(name+title) ECB, 35 GUIDs, seed 851

Metadata

Post ID
113wdh
Title
201210071845 → 2012-10-07 18:45 on A858's clock
Posted (UTC)
2012-10-07 22:45:29
Timezone
UTC−4 · title 18:45 against posted 22:45 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,256 hex characters · 1,128 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210071845) = 82ea7377182d8aa85dbdbe7b9aa8f4a8 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
35
Filler GUID seed
new Random(851).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
404 · predicted N = 35 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,256 hex characters = 1,128 bytes = 141 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210071845 (name+title). Key = MD5(password) = 82ea7377182d8aa85dbdbe7b9aa8f4a8, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 35 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ee1da97f-9a98-2d29-909f-d63911f5621e
  2 9bfb5a14-8d28-4b8f-aa28-f1cf9615ff18
  3 b24ee371-456c-5344-a4b2-8fc6199414d5
  4 6ad00abe-5c14-1582-b201-b200d8ad4ef8
  5 8b9ae26c-0f07-3125-8255-09478b892654
  6 837323b7-3048-204a-a61c-193cb177f1bf
  7 01165fef-179c-144f-9fdb-0018da1b2a3a
  8 77ef38c7-5c0e-3c0a-9440-147a7de0cacf
  9 b9fc0bea-81c1-21d6-b8cb-def5bee041cd
 10 cc7135a8-9f1c-039a-aacd-dc33b7332e61
 11 5bbd34da-ed2d-245f-8083-edb9eef86c90
 12 23e0c8b9-f3cb-784f-91a6-84993de842de
 13 a8dc0eb8-4b7a-5c78-bd3b-9e4b4d34c638
 14 02274f68-50e8-1a92-88cd-61e2d84a8943
 15 9e479ee5-0631-50ce-aec5-3262e6a6727e
 16 321eb8fc-489c-4b37-8b39-f73d886761b5
 17 3da04720-5234-5f30-b449-a546526ff111
 18 012aaf7a-b54b-59ea-9a51-d2cd6394bd76
 19 d047b384-e5e1-6922-b57d-8f999d9f16cd
 20 f01e5ff1-6564-7600-9ff5-073765a3123d
 21 90a6f813-b424-8d0e-809c-b3398bec7d4a
 22 914dbcbe-9ccb-506e-980f-04f560b1c69f
 23 10622051-285c-7f0f-9a07-9530114e86c9
 24 ad1594ed-4202-2cf7-a26f-1b635c4bb681
 25 aef69f2f-2f4b-0b12-aba1-cb398ea7dbb2
 26 7279f967-ce07-7558-908f-0472e15e32cf
 27 0d382b0d-6f61-5941-9e55-9e4bd400d8c1
 28 b28e11a6-51a1-80ee-8979-87ae51308ce6
 29 59ff0d63-cec1-5316-b7d7-7c23d5e82bcf
 30 a0f1ff53-bbef-3c4d-af66-5deca750fda0
 31 003d81e6-29f7-3f9f-8f8c-f2c0a9266633
 32 be2c2fb6-530b-5289-826d-0c979a0bc211
 33 7a43b4b1-cc3b-450d-891e-4297e39b50d9
 34 33a4ddf7-10b7-2efc-abfe-d7ba76f6a285
 35 60b09e67-261c-7296-8312-2b5c8c80edc6

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 24513213202751545567857207585335427. Exactly this sequence comes out of new Random(851).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 404 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 35; the post has N = 35 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results