A858DE45F56D9BC9 archive

201210072305 114awu

explained decrypted filler

3DES(name+title) ECB, 28 GUIDs, seed 67

Metadata

Post ID
114awu
Title
201210072305 → 2012-10-07 23:05 on A858's clock
Posted (UTC)
2012-10-08 03:05:38
Timezone
UTC−4 · title 23:05 against posted 03:05 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210072305) = 9674d30f41e87dfe09197ed40f246538 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
28
Filler GUID seed
new Random(67).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
417 · predicted N = 28 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210072305 (name+title). Key = MD5(password) = 9674d30f41e87dfe09197ed40f246538, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0e644eaf-2e4a-6a89-8744-0138e81f28e9
  2 81f1259a-202d-41e8-9164-4f65176b807c
  3 0efa7a57-a571-5397-8e4f-9af4d5fe8227
  4 df610c92-8b39-7009-908e-cee747552e87
  5 a0e04cec-510c-4963-8d31-737a1a1f1757
  6 d09f56ec-2e3e-0844-8d4e-39ea484b4ab8
  7 83e347cc-bb2c-8f99-87e1-98c662513f89
  8 a7bcd2f3-047a-0079-bbed-eeadfaf0f6f8
  9 3952a644-b74c-2632-b0f3-fff10a565d6f
 10 89cca7a8-b17e-8f4d-96bf-8e2c32312cab
 11 8b4e4c99-395a-5c92-8711-069b986f8730
 12 23c8beea-f81a-6d73-9d10-eb452c11c025
 13 27b5a833-deaf-64c7-8240-a0d3219089ac
 14 179be420-50ed-2955-8cc7-5fa85e1a73fa
 15 814f5fd1-5d3a-7c17-8cd1-8db1c7b61d83
 16 c7a81093-c1ba-7a8e-acf4-e4063af19bc8
 17 3eaa3cb7-d905-0c54-a2d2-35668c0ae7f3
 18 661549bb-edfe-4795-a8fb-b3629f39fbd3
 19 2b6a8fa2-d858-4053-b211-d152ed1e4b2b
 20 7cb9b48d-c4ec-2b5d-8f3b-5e35cd441f7a
 21 92e645be-77f0-6cc9-9be8-647a3554db36
 22 53b7ee24-a976-29f8-b784-10d780b3418f
 23 7b29d06e-587c-2a76-b02e-6c43bde5aa38
 24 7e35069b-45e7-31a5-88f3-1c7ae7f0bb96
 25 c7d6ad4e-0ce0-2efc-ba4d-e5ff7d867d7a
 26 2a6d000e-23c5-5053-a8b4-7e1de28c55c3
 27 67dcaaf5-529a-4eaf-b50f-928869621d21
 28 166641ca-7c8f-1306-818f-5a03d48423e4

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6457408028566277044262232541. Exactly this sequence comes out of new Random(67).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 417 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results