A858DE45F56D9BC9 archive

201210072005 1140sc

explained decrypted filler

3DES(name+title) ECB, 31 GUIDs, seed 319

Metadata

Post ID
1140sc
Title
201210072005 → 2012-10-07 20:05 on A858's clock
Posted (UTC)
2012-10-08 00:05:31
Timezone
UTC−4 · title 20:05 against posted 00:05 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,000 hex characters · 1,000 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210072005) = dbfb46378cc6de405d61ae15f646b684 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
31
Filler GUID seed
new Random(319).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
408 · predicted N = 31 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,000 hex characters = 1,000 bytes = 125 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210072005 (name+title). Key = MD5(password) = dbfb46378cc6de405d61ae15f646b684, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 31 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e974256c-6e7f-38b5-8404-0e698c44650b
  2 f95ea15c-6396-35d8-9151-b404925f1bc0
  3 4b5f384d-fd65-6e80-adfe-1c81bb606edd
  4 9d0ac7d5-53b9-5e77-92b4-1c0184e5d0a9
  5 14d8ee24-5c0d-261e-995a-baa25760a1f6
  6 591e3126-2523-2cb3-8f59-ea39557d0da2
  7 00aeb2c5-9b8e-796e-9eba-586481e3a4e8
  8 188b198f-29d6-443b-ba4a-070299f38769
  9 7c42afe1-45f5-3781-b1e7-c998b3906134
 10 18218e10-07c9-8193-b9ee-8e9aa956376e
 11 3f82dba9-aa27-2d96-b27c-b538730b376d
 12 d1ba87b9-b04d-4836-ae99-b3c4625cc652
 13 7592f07d-8063-8617-9989-5b595ca58893
 14 879da3da-5e58-3d99-bb31-a7d3b520c065
 15 000eb59b-3a16-2247-be00-6a6c2ab3e7e4
 16 710a3ebe-5826-29f8-be56-9322cf604db9
 17 406d02f4-92a0-8295-8d40-82ae63f06319
 18 a6354c53-c3f3-6025-8d2b-f28be0c287b8
 19 2fa935c6-c8dc-2371-829e-6b7cfe8889e2
 20 cb24ca7e-5a45-7f68-bc46-872285c2c30d
 21 85e2b813-8d2d-1534-a461-580a25b653d0
 22 cece0b28-a378-0fd4-8edb-a8ebe286fcc7
 23 8e83e634-b721-82e0-8d24-0a53914f522f
 24 b400df15-5eb4-4b7a-8b3a-3cf7c2782ccf
 25 fe9b7b3a-15b7-8fd2-939e-6bcf29842f9a
 26 ddda2b9d-bc8b-6a53-9a82-9b0bcac60572
 27 01861fbd-ac66-1632-8f3c-b574bc6f42cb
 28 f3db0b6b-a254-32c8-a05a-113d35b213e6
 29 679069fe-aebf-577d-b05a-8c1bfa1a8d9a
 30 b1b7070a-b8bc-8302-b737-b37e8c8a3097
 31 6f4f7ee0-ec6a-8985-8c93-e8d79e888c89

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3365227438248322862710848613588. Exactly this sequence comes out of new Random(319).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 408 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 31; the post has N = 31 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results