A858DE45F56D9BC9 archive

201210080705 114ser

explained decrypted filler

3DES(name+title) ECB, 38 GUIDs, seed 820

Metadata

Post ID
114ser
Title
201210080705 → 2012-10-08 07:05 on A858's clock
Posted (UTC)
2012-10-08 11:05:56
Timezone
UTC−4 · title 07:05 against posted 11:05 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,448 hex characters · 1,224 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210080705) = 232eaf6410a005557f4b110c5562ef90 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
38
Filler GUID seed
new Random(820).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
441 · predicted N = 38 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,448 hex characters = 1,224 bytes = 153 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210080705 (name+title). Key = MD5(password) = 232eaf6410a005557f4b110c5562ef90, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 38 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a91c37e9-29a0-128d-a220-7eae066b9f7c
  2 601a6966-b5aa-37a5-9b98-63f79d70521c
  3 a8f10cbd-e6a2-8e45-b7ed-868473c8b564
  4 0897e436-b94a-5c55-a949-66b18e733183
  5 68c69705-7a41-3256-b459-9bea5d194538
  6 04547651-7488-1bd4-9686-00bb6bb3ed25
  7 18740517-e3d8-2634-a04c-3f3d24bdc871
  8 b7ed51ac-c668-7033-a7d3-3304b1971484
  9 547bb910-57dd-3003-983c-d9bf0ef48e0e
 10 4419218c-30c0-5f05-8d28-c14465c2fd4d
 11 f2e202e2-2c98-30e9-a8d5-cb4877ec6631
 12 e839317e-7c27-5776-a06d-1d7c3e6e0448
 13 530a55d6-cc39-3a2e-a868-8d05c6746af1
 14 2810130a-7964-075b-a76c-c8bfcdf3af4c
 15 8ecbeb25-549f-8a77-84bf-fb91ab7606c1
 16 7686c766-cb6f-1f5b-80f6-123fb56efcf7
 17 34b8e843-8ec5-5c77-ba88-a03a47c30adf
 18 f0949906-5508-301a-a4b1-b2a26af19351
 19 14367463-966a-714a-b800-1fe950701274
 20 65fcb0b8-b2f0-7e40-8233-ef7d97c0337e
 21 4b7db936-f2bb-6ab9-bbc1-30fac02c8a63
 22 34b4036b-ff86-0394-be27-49967d54f26c
 23 fc638ea5-bf47-51a7-bf77-24353b97a930
 24 1a25a75a-a13f-4b31-a963-ff4240fa21e7
 25 78ba4b4e-9df3-00eb-bd64-e9218b455e3c
 26 3144589f-3d41-87a9-8194-4d5e2536507b
 27 442bbf86-b8b6-8427-8904-319845a9137e
 28 48b77540-7f9a-6133-b978-4e2fb3348826
 29 17a97039-827f-058a-9bea-cd7a80de7fa5
 30 39c1d40b-4bcd-4029-9b00-de63873411ff
 31 a24f73cb-b037-86a5-8427-e67914904af7
 32 e89038dd-1c7b-4c32-8257-3f1ea41c6077
 33 83d59ab4-3273-0878-9218-bb11adfcbbc8
 34 f7cdeea4-c9d2-4097-b67c-eeb47f22a5bd
 35 be12e5ad-c77e-861d-80b2-6edff294122c
 36 808b5d1c-c6e2-2e35-bee8-a3ea0dc34a20
 37 3adfd8fd-8871-2a86-bc5d-d3e2346ecbc0
 38 81f5bb1c-222d-11a7-8256-abe8027f7cfb

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 13853127353530815377605408860484048221. Exactly this sequence comes out of new Random(820).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 441 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 38; the post has N = 38 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results