A858DE45F56D9BC9 archive

201210081126 1152u2

explained decrypted filler

3DES(name+title) ECB, 32 GUIDs, seed 767

Metadata

Post ID
1152u2
Title
201210081126 → 2012-10-08 11:26 on A858's clock
Posted (UTC)
2012-10-08 15:26:06
Timezone
UTC−4 · title 11:26 against posted 15:26 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210081126) = 56bdffdad953213e997d9a15f3752666 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
32
Filler GUID seed
new Random(767).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
454 · predicted N = 32 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210081126 (name+title). Key = MD5(password) = 56bdffdad953213e997d9a15f3752666, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 27bc78e8-09af-3739-a060-24e7fec2c130
  2 365564c5-f646-726b-a4c0-69bf0eb8a608
  3 3b9d6f9f-3e06-8e45-8e0d-d2fc44856c5c
  4 3550837d-ad16-2493-ac85-4d5ace5da680
  5 86c6452e-7fba-4979-856f-b0f775312b2a
  6 4a0500d5-5e3b-708c-9500-9edb92a5c066
  7 4afda868-1a04-59be-a62c-83a86a4674fd
  8 71f0ba99-059d-22d1-a893-dfe88993fc03
  9 67ae6ab1-d8f9-7f03-b021-7f08dd52cef1
 10 67d7748f-36bb-0a0b-89a4-6b2d18860fa6
 11 35dd5d67-ebec-33c1-b7b1-33583ca60544
 12 8078987c-e1c6-2c49-aa7b-d672f98635e7
 13 cc5acb26-2a57-8a4b-9cbb-5f5944f6830f
 14 9f7cffcc-a5ae-4755-9547-141b3287ed80
 15 40091073-967d-7565-8975-220b925483b9
 16 0b8a7272-680a-0d66-a077-f71ba274a588
 17 afd7c765-61a9-2215-828a-f812beb241e1
 18 53769a8b-0ee3-4f1d-b91e-98c9c2057b1a
 19 572dd0c4-3fa3-3834-9a1a-ba6e8d894a7f
 20 4efcab97-257c-2bbf-9b76-8d9ece59de50
 21 7780598a-eb30-6550-8960-e73b6c1a8ec5
 22 16b04330-133c-0d5e-a1ad-2955b50e6ea5
 23 a76128f1-78c0-5dc9-8187-4d6354610cab
 24 4e604e47-1f9a-8275-bb72-09daa30a22ac
 25 92e576e2-c4b6-70eb-82ac-291348e4f0d8
 26 daac0a12-d015-7189-8e1e-d2f11879c3d9
 27 79e285c9-d687-3c4a-8371-4eeed9839c4e
 28 128c1eab-8ee2-8446-8d0e-d5faeb239448
 29 5c05acab-fb67-3995-811b-e05a93a17009
 30 cb191d50-2874-7edb-81c1-f32c809449db
 31 019b2bb2-30aa-3646-9613-0217ece52382
 32 b27b5ac3-f570-47d5-af8a-51f17239e312

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 37824752703284702432605877383734. Exactly this sequence comes out of new Random(767).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 454 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results