A858DE45F56D9BC9 archive

201210081926 115yh9

explained decrypted filler

3DES(name+title) ECB, 29 GUIDs, seed 331

Metadata

Post ID
115yh9
Title
201210081926 → 2012-10-08 19:26 on A858's clock
Posted (UTC)
2012-10-08 23:26:33
Timezone
UTC−4 · title 19:26 against posted 23:26 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,872 hex characters · 936 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210081926) = 45ee321b627daf589dceff426e21e807 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
29
Filler GUID seed
new Random(331).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
478 · predicted N = 29 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
7 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,872 hex characters = 936 bytes = 117 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210081926 (name+title). Key = MD5(password) = 45ee321b627daf589dceff426e21e807, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 29 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0622de46-3bb7-5023-9b0a-c47d043e8c1f
  2 c143d50f-2749-83ad-9979-3771932e6cc1
  3 42e2c4d0-4a61-1e40-90ef-5a5fb02bbb49
  4 c63bd372-1a4f-134a-996d-34517fdac87b
  5 f03788ed-92a2-54c1-aa6b-f58fbe1a9833
  6 458365ee-bbe4-7b5f-838c-bd3b64e98144
  7 c9c3b022-9a55-1498-a4db-4d47b7fc0f5e
  8 210da197-e350-4ec9-ac4b-23376c74e69a
  9 7795d18b-15fc-8ce2-b23f-12054ea9148b
 10 3c127b1d-a3bc-263a-b38b-ad52bde3d527
 11 bc93c0e1-a444-1dfb-aab9-b2e4b7e5a58d
 12 9525ec46-0347-775e-8326-f35ab30dad42
 13 574f1d6e-a6ce-1870-9bbc-659ad0dc9cc7
 14 941605be-4ea2-6e0e-a4a2-42cb2c7e5097
 15 4a21b9ae-6358-6976-a153-2f17f93c46a8
 16 cae3cadc-30c4-627d-88a2-874a0f03d30a
 17 a6535eee-6e47-0a6a-835e-8c4a529263a2
 18 2a6cab32-3401-1d5c-9773-83a758267585
 19 2ce9d124-5543-5efc-b6e1-13817905fdbf
 20 13c69638-f02d-48eb-8da3-be03de735b13
 21 568799c1-3fc7-79cf-8b7b-c16da8475e31
 22 4162cc43-72e8-0d73-87c1-7dc9c98a7ae1
 23 bdbcd551-957c-822f-ad69-fdda7c7ab0b9
 24 2cede9c7-f2d3-5c6c-8795-2e08a530ee57
 25 9d93b9b0-7867-1839-b202-3b760c4ba934
 26 88f32971-8eca-3e80-a281-2350cd5b0eb9
 27 0bfc0d4f-170f-47e0-93c7-89fd02a53ecb
 28 627e0624-e62d-7cbc-9146-6dc1ddc8d317
 29 dbb74c6e-5062-8948-825a-39900951601a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 58115714821716660154708513478. Exactly this sequence comes out of new Random(331).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 478 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 29; the post has N = 29 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results