A858DE45F56D9BC9 archive

201210080145 114j2d

explained decrypted filler

3DES(name+title) ECB, 27 GUIDs, seed 15

Metadata

Post ID
114j2d
Title
201210080145 → 2012-10-08 01:45 on A858's clock
Posted (UTC)
2012-10-08 05:45:44
Timezone
UTC−4 · title 01:45 against posted 05:45 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,744 hex characters · 872 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210080145) = 538d7f1556aaaf397c05e1fa7d7176d1 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
27
Filler GUID seed
new Random(15).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
425 · predicted N = 27 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,744 hex characters = 872 bytes = 109 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210080145 (name+title). Key = MD5(password) = 538d7f1556aaaf397c05e1fa7d7176d1, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 27 GUIDs as hex (shown below).

Decrypted: GUID list

  1 242d1692-41f7-5b81-91c9-3fc02c01eb5c
  2 d89c4f26-db12-1c06-9628-5041b81544af
  3 6eb920dd-e5d6-2e66-ac66-34d54363ea96
  4 534338ce-710c-688e-81c2-47477654e095
  5 6e204718-db5d-8505-b7c8-e0c27560982e
  6 f3b2a36c-72b0-6277-8ff3-528772abe00e
  7 59fa7762-51ae-5310-8150-8726a1939ef2
  8 86ccb982-52c6-8dee-8258-27e9cfa0bb54
  9 78a9dbb3-858a-71cc-96dd-641ae466b58b
 10 7d40b68b-3698-7f89-974d-7006aef5a1d7
 11 27f404d5-0e94-309d-9502-eb98a7ee5b78
 12 9fa073a1-3670-185f-b51f-dc2401291339
 13 6f136eda-2244-82ae-afd9-c2fe9256c940
 14 e490b714-9414-2c39-8fa1-3f5defd63741
 15 ad06ac3b-f5b0-40dd-9b2c-a670a4b69fbc
 16 8c4d6b8b-8564-362c-92f9-94a64974a77d
 17 93fd9575-7098-116c-9dff-0979d62a2a5b
 18 1a635481-6701-2133-8bfc-9ac5e1132c2a
 19 2917dd02-f5eb-0e96-92a3-12550cd745f1
 20 48b0a685-e4e6-1a6d-828b-cf5154ce9adf
 21 b661d6ff-89bf-7532-8971-4c65bc24387a
 22 6e293f4f-0679-45a3-9d32-f751f518d718
 23 92a356ce-88e0-44ae-a285-122c86ecfe12
 24 161ca25b-6524-2284-b893-865e695a8481
 25 ea183ebf-0d8a-132b-a4f3-7f3414a7b491
 26 971a1df0-56f6-1093-adfd-e45d447b3ff4
 27 b159f6ab-6a18-7287-922c-c9bf378c4231

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 512686587731824312017442117. Exactly this sequence comes out of new Random(15).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 425 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 27; the post has N = 27 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results