A858DE45F56D9BC9 archive

201210080505 114pgr

explained decrypted filler

3DES(name+title) ECB, 30 GUIDs, seed 192

Metadata

Post ID
114pgr
Title
201210080505 → 2012-10-08 05:05 on A858's clock
Posted (UTC)
2012-10-08 09:05:52
Timezone
UTC−4 · title 05:05 against posted 09:05 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,936 hex characters · 968 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210080505) = 58b9fca0ff02ace2d8469252f8116730 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
30
Filler GUID seed
new Random(192).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
435 · predicted N = 30 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,936 hex characters = 968 bytes = 121 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210080505 (name+title). Key = MD5(password) = 58b9fca0ff02ace2d8469252f8116730, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 30 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0de87eaf-3e1d-0eab-867b-bc2e6592b82b
  2 e705c0a9-cbc8-14e3-8eaa-de6ad1bce049
  3 f9ce62b2-a569-85f8-9c78-52ecfd9ce47a
  4 44f5f267-4095-4333-a0e7-7c9f4c71512c
  5 35c43394-b226-873c-9cca-fcfe98fbf33d
  6 a4375b96-549f-3813-99e2-7eb7b1ae1469
  7 3c3bde2e-0ca8-8ef7-b5fd-7960cb91b91f
  8 631c93df-5397-6e21-bf18-754425d908f6
  9 4ca3bad3-c914-6096-bfa7-5d7121828b32
 10 96219f32-593f-0916-bce0-35c4b5f167b3
 11 e04bc167-424e-6266-8b89-c7fb5e6b5d3c
 12 597440eb-776d-35af-890e-697c28de0add
 13 d9e02971-89f7-5983-b922-a16b3f8f23e9
 14 573eeaad-e9a0-3b1a-b110-f00717c51d4c
 15 85e24912-cf8d-3d70-89c9-6f0b3ef20c75
 16 a2f4b336-d23f-8c8a-89f4-ec0aa9de5394
 17 cd3421dc-e7c2-5817-9507-1734f1e33f01
 18 75db53bb-200b-0d28-9afa-702c487b2703
 19 f69c13dc-f591-747f-acb3-b5fa03bf3f55
 20 6d3f3829-eff6-50a6-8c80-c987b08b40ac
 21 5925017c-1f36-2243-a5de-2bfc957ad8f9
 22 615906d4-e3eb-82b0-9acd-4c17671040c5
 23 877f4116-a9e0-3a80-a523-8908fbdb2e69
 24 d5eb85d2-232f-02c2-be28-12f10a0f6235
 25 27aaf1f1-50f0-4c69-a64f-48dd0e1c92a9
 26 6299628e-3553-04c1-80df-228237e7f357
 27 b30ad2fc-bd5e-0eec-9028-cc1ddf85a157
 28 fac2ea22-90e9-5a6f-85f3-8dd5aafd041a
 29 f906bd30-5240-5b95-a4d7-19c47c38006b
 30 a230ac1c-e46c-65ab-bea0-911960e33d9f

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 018483866063533850752830400556. Exactly this sequence comes out of new Random(192).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 435 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 30; the post has N = 30 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results