A858DE45F56D9BC9 archive

201210080025 114fa3

explained decrypted filler

3DES(name+title) ECB, 33 GUIDs, seed 174

Metadata

Post ID
114fa3
Title
201210080025 → 2012-10-08 00:25 on A858's clock
Posted (UTC)
2012-10-08 04:25:41
Timezone
UTC−4 · title 00:25 against posted 04:25 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210080025) = 09568070b330847bd3907080fd71b8d9 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
33
Filler GUID seed
new Random(174).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
421 · predicted N = 33 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210080025 (name+title). Key = MD5(password) = 09568070b330847bd3907080fd71b8d9, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 f719d825-8a5e-5565-9ee4-b4535e373c4e
  2 918a83e9-c2ce-71b4-b6b4-b6c519732f5c
  3 835023ae-de88-32fb-ba2a-dfe21bb62e27
  4 350a0c84-a544-687d-b922-70cd9661b1ec
  5 674f3e38-775c-65fb-9302-d7cdf897868c
  6 c9182b98-5d2f-5483-bd2c-58230c1ef8ec
  7 458579f9-9188-7789-b2ba-b25f8a649cba
  8 a67121e0-f8cc-6e1f-8560-de9015e25143
  9 4da618c2-9d10-499a-b1db-53b4d5c216d7
 10 abf77771-b438-3073-9c87-39db729f1135
 11 2de83641-4262-4840-a850-be65702ca38a
 12 ad94b190-0c9f-23dd-adcc-b270280339e1
 13 f55c1cc9-9839-28d6-b270-cdd6f4a6c6e7
 14 241a71c4-0002-8363-8965-c8c5626dd240
 15 962c4332-cdac-6a93-9646-3a40750ccd57
 16 c0754b2a-f009-6bec-922e-aa975fb1e93a
 17 83c8b063-bf3e-06a5-a7ab-e86edad88912
 18 101b88c8-80be-7011-b83f-8fdc989d66aa
 19 1da0832d-79d7-391e-9a64-47ea3e509687
 20 8a2d193b-8f46-618a-9afa-f14a30c12e4a
 21 aa7ea8ce-da30-877d-8b2a-770aaa56043d
 22 08f7fcc4-82f9-4230-b572-e5df3b0c4e02
 23 e289145a-8524-3fb2-979f-10abb5965995
 24 8cdddbb0-e699-7676-becb-f0dc380d5d50
 25 47d5583e-4dd4-6861-82a9-7b11ff64cd4d
 26 7a0802ec-fafe-3f5a-9635-713a69d1f774
 27 45d5b478-80fe-4b28-aa70-e6c64bcc2e72
 28 59b8f99b-1998-413c-8f0e-132c4006fe92
 29 5c18cea2-17ec-52a2-96ea-56ae3159e06f
 30 1667bc25-42cc-111b-b43d-74f62785ffe8
 31 14c49142-439f-3b73-ada8-83cb2e9f559a
 32 e03b2a34-0e7d-27a4-83e9-3877e9d0edab
 33 505ae3b4-8c15-241e-a70e-85989d733335

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 573665764342286607368437634451322. Exactly this sequence comes out of new Random(174).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 421 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results