A858DE45F56D9BC9 archive

201210071905 113xg5

explained decrypted filler

3DES(name+title) ECB, 41 GUIDs, seed 385

Metadata

Post ID
113xg5
Title
201210071905 → 2012-10-07 19:05 on A858's clock
Posted (UTC)
2012-10-07 23:05:29
Timezone
UTC−4 · title 19:05 against posted 23:05 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,640 hex characters · 1,320 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210071905) = e54746e30de938e4d2daebab1d06084e (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
41
Filler GUID seed
new Random(385).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
405 · predicted N = 41 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,640 hex characters = 1,320 bytes = 165 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210071905 (name+title). Key = MD5(password) = e54746e30de938e4d2daebab1d06084e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 41 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9c3a22bb-d014-7805-b4f1-7495f3af78a8
  2 89114422-0cdf-7cb7-ac5f-259b28d9a788
  3 5a971323-3f42-73f1-a5f1-2eb9876354f0
  4 89455131-656d-6c25-a9f0-292786adc0f5
  5 c6a1a6b1-65ee-0302-9886-c3e18e5a1bcc
  6 cf1157e8-38c8-0652-82bb-3b50ff9f34c2
  7 3f9d1d7f-96d6-3ab1-9fbe-e3365c842064
  8 4b78d747-6e6b-55ca-8594-b3a6f7d8cbdb
  9 f102ac7d-5df8-50ed-aa5b-ef13514cb444
 10 525e1dc2-851d-26ea-8c1e-8909cb9cef66
 11 6176542a-19bb-8f8a-96ed-ea89f99556c5
 12 0128feab-1c42-0732-9ccf-a9b04f49dbfd
 13 59107994-510c-2dfd-bedc-044aa5fc68b8
 14 b90e6c0f-9422-6ba6-9c22-f7507027bba0
 15 f2b5e0de-aa6f-403f-9453-751e812f69a5
 16 1cb31a62-8d06-46cc-8aec-42bf65d65d99
 17 011ba3d8-b394-6cf1-8195-7d9e45a546bc
 18 18ee713d-0f60-635d-8af1-e9b9d4ce7689
 19 99da2bd6-5a6d-0459-82fe-799f55d5f1a0
 20 f75e6fcd-c8cc-3cfa-80b4-dc9e6b7fb56d
 21 93fb1e8e-3bc7-83a4-ab00-fd5906cacd2f
 22 c15689d8-d515-257f-9384-f5b69d85819d
 23 eabef914-87ba-0bc4-9410-a43c2d4a908b
 24 6138b6f1-bfff-444f-b5f9-8eb8761d9d0b
 25 4246a567-3a19-3356-af25-c1db7b667871
 26 3ddfe1d4-b91b-1681-8935-fcc08c4a01c2
 27 c592e4a3-7c30-8a9e-ba13-4953d3ad3afa
 28 4edd2ee4-380b-2c8d-9d91-442f1280f355
 29 a8ec1432-a731-7490-9c1b-727a7db60da0
 30 1b9bbf46-1b7d-1f98-9004-1e1da12130f6
 31 fa8f543b-6e62-2b87-b52e-65bc5a713b71
 32 853345b5-1dfa-782d-abb3-1409202c2733
 33 7fe419b7-52fa-1890-b18d-f1c501ffc4ef
 34 a92b9221-e52f-5471-9508-a5eceb3c73f5
 35 d11d4339-a5a0-0faf-9c3e-51a0f3b6dca5
 36 7d11e654-b6f8-4146-9132-cabba713c73e
 37 775b5ed4-9113-88fb-a1e0-f824f18d41ac
 38 4c3dbb6b-841a-6f7c-933d-153ccbca8ddb
 39 2286f764-3d8c-2da0-b1a3-5ffb2430dfb9
 40 1ca6351c-34a2-5752-839a-620f3e45679a
 41 d57a9826-0b55-0241-82bc-00632301a075

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 77760035528026446603820431827127150486250. Exactly this sequence comes out of new Random(385).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 405 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 41; the post has N = 41 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results