A858DE45F56D9BC9 archive

201210080425 114ogi

explained decrypted filler

3DES(name+title) ECB, 38 GUIDs, seed 949

Metadata

Post ID
114ogi
Title
201210080425 → 2012-10-08 04:25 on A858's clock
Posted (UTC)
2012-10-08 08:25:51
Timezone
UTC−4 · title 04:25 against posted 08:25 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,448 hex characters · 1,224 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210080425) = 1954c8148bf3e854065c83c5386d47a0 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
38
Filler GUID seed
new Random(949).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
433 · predicted N = 38 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,448 hex characters = 1,224 bytes = 153 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210080425 (name+title). Key = MD5(password) = 1954c8148bf3e854065c83c5386d47a0, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 38 GUIDs as hex (shown below).

Decrypted: GUID list

  1 11712fee-f611-42dd-9ccf-0fafd7eca618
  2 4087fade-9e0c-2697-8775-022f0fb63908
  3 3b3add01-e46c-050b-a1ac-5bdcd36b1970
  4 c06f56ef-fc10-1e1e-8df9-88df1f32cdda
  5 4b548fa4-2e7d-53b6-b0ab-97dc2f8cae2f
  6 c334f962-09e7-720b-9264-5096520351c3
  7 93da6124-bc23-19d4-961a-92a0ba435005
  8 f97d96f6-3e49-4815-adb3-04a43a43fee5
  9 78adc6f8-541b-31de-891c-6b3871dc3c5b
 10 757ca252-75e5-1587-a919-338abfb08af1
 11 e7615f28-035e-4076-959c-4512d37395ef
 12 23fe3723-47b1-3871-b5e6-306532d2c5e8
 13 cbe402a8-d760-0d4b-b90a-be33931de55f
 14 bb961a20-7561-1aed-80e5-936f1803b2c1
 15 e5facab0-273c-25fb-ac3d-d2253e47b23c
 16 5c99670a-9b34-6956-96e0-08447ae710b4
 17 b14534c3-ad9c-7b20-912e-a54224ca7b2a
 18 d8a5e5f9-4a5d-3722-8011-a6c5cae9591f
 19 665a17ec-5fda-35f1-8e46-6427e31c36ea
 20 5fb0c693-8c67-664c-a9a7-923b5d1f2110
 21 6e929279-1480-84bd-af98-be7e5da1cf8d
 22 5f6380fc-6e88-6270-be5a-6d486bce830f
 23 75edfc4c-d013-3da3-8668-9e351b329bf4
 24 c623e147-251f-583e-b71c-524b97d09742
 25 39b0714b-05f9-6df7-b0d8-f3df2df2b008
 26 3c6a5634-1c1a-84ac-b3eb-cd3acc83da74
 27 4382b4c7-c308-7365-9626-eff0b1e5118c
 28 6a37d30b-8ea8-60e2-9e06-5d8c9425cb96
 29 7d39389d-461e-651c-ae5e-c1161f9cf04e
 30 338b8969-50cd-33f7-a3f0-91054af59114
 31 cc7977c6-3236-47ff-b604-3b2fdfbda23f
 32 2c91188a-bc3f-3866-858d-1e90d8dc05af
 33 3e39c0a5-8a61-84bf-8604-7b9a1aa5b7ab
 34 fdc00743-5b7f-732d-833b-79ec4791b26c
 35 30b6e01c-a18d-0ada-813f-eeab9187ef14
 36 9ad8922f-4fc6-8505-8264-e865169a7db9
 37 8503aeab-2219-1318-8f81-d5cdd5fc20f1
 38 760fb957-709f-1f4f-b3c7-720f0e87a24e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 42015714314301267336863568766343870811. Exactly this sequence comes out of new Random(949).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 433 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 38; the post has N = 38 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results