A858DE45F56D9BC9 archive

201210080105 114h9d

explained decrypted filler

3DES(name+title) ECB, 38 GUIDs, seed 850

Metadata

Post ID
114h9d
Title
201210080105 → 2012-10-08 01:05 on A858's clock
Posted (UTC)
2012-10-08 05:05:43
Timezone
UTC−4 · title 01:05 against posted 05:05 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,448 hex characters · 1,224 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210080105) = 11d8159aa8f238869d81e0407e263b14 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
38
Filler GUID seed
new Random(850).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
423 · predicted N = 38 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,448 hex characters = 1,224 bytes = 153 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210080105 (name+title). Key = MD5(password) = 11d8159aa8f238869d81e0407e263b14, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 38 GUIDs as hex (shown below).

Decrypted: GUID list

  1 8aeb32ef-eb58-74a5-85c4-ddb077cdb412
  2 52a69be5-ac64-280f-a219-da52795b3b30
  3 f93befcd-e454-8520-bfcb-b32019f82d8b
  4 cce11a86-abf2-8539-96b2-bd4332903241
  5 d214eb33-c277-8953-bf92-6dad4d37d686
  6 747deb9b-1c59-39b3-b684-9b8783a897f0
  7 0970c97a-4521-661a-a20c-480568b11a94
  8 f16c43c6-ce76-7df4-855a-37e9def63ea4
  9 ece7e86c-a865-1227-8623-ffedfb7e147d
 10 bf120ad5-eba0-6296-8fa1-71c220d13e1d
 11 7d39b358-7611-40da-b573-3beecde993ce
 12 c5519a26-c6c0-0ba2-bb70-7ed55467412a
 13 cf4f88d1-29df-8501-bbe1-71a9ce6a4202
 14 7006911c-7192-611b-9b9c-43b72db8410e
 15 5bdf4950-6a4b-8b69-85c2-3ecba2f75ffb
 16 4e136104-5097-78aa-8b51-92d2ff11c388
 17 2910d484-52ae-1b95-b0a1-e87f032f8382
 18 ac04b6a9-1445-8ba1-b022-5903d4b60a38
 19 5cad8225-740c-611b-9492-f2e735f89261
 20 ee26413a-a09a-3467-85d2-0ba04bd21689
 21 53fea1e0-4260-6fb7-bf83-776d1f0e3bed
 22 f2f3b1ad-26fe-360c-a0cc-9c831a4bcd69
 23 b7f39bfb-4dba-5ee8-9304-bf35e11002f1
 24 f3b173da-692b-849a-b59a-5fce4b44c3ae
 25 b882cf9a-367d-013e-90cb-799d83aa6fd4
 26 d1c0ce31-83a9-27e3-a37f-155b3a73d383
 27 d88819d2-98ca-652e-be28-2b3e103e4bbf
 28 563016e6-db89-38f1-b87b-1a7acf51fb63
 29 4f0ae271-026f-2841-be1f-7af5dd2e5e04
 30 a0f7194b-8fa0-5b3a-84ea-7cc4914284d8
 31 ad0b2cd8-c8bb-8a98-bceb-746ece7a2bd1
 32 a6eb6c25-b96c-35ad-a755-2e80bd55883c
 33 ccaa7cfd-9e96-0e04-ab8f-adfb54c349fe
 34 d2f91e3a-2ea1-2ede-9570-07f07d0311d5
 35 ddbfd9f4-e471-4611-84a4-fd28bb8cf9f7
 36 7ba9dae9-c0c4-5519-ba11-dbe26849f65b
 37 bd9587ce-fac1-1efe-85ab-a07145fd5ab9
 38 dbbfd88e-fc72-52af-8304-389f56854e11

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 72888367164086871863635802632583024515. Exactly this sequence comes out of new Random(850).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 423 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 38; the post has N = 38 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results