A858DE45F56D9BC9 archive

201210082046 1163th

explained decrypted filler

3DES(name+title) ECB, 37 GUIDs, seed 774

Metadata

Post ID
1163th
Title
201210082046 → 2012-10-08 20:46 on A858's clock
Posted (UTC)
2012-10-09 00:46:36
Timezone
UTC−4 · title 20:46 against posted 00:46 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,384 hex characters · 1,192 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210082046) = bd8917c33e2cdaf9d884960125b40342 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
37
Filler GUID seed
new Random(774).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
482 · predicted N = 37 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,384 hex characters = 1,192 bytes = 149 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210082046 (name+title). Key = MD5(password) = bd8917c33e2cdaf9d884960125b40342, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 37 GUIDs as hex (shown below).

Decrypted: GUID list

  1 78e43115-9806-0ec5-b66b-3268ef4ea22a
  2 c697c18c-76be-87e8-a337-ebbdfdca8a24
  3 9a0f1e67-c4a9-790e-9b6e-7a9a3cbf75aa
  4 638e6036-0c5e-6aab-b800-918c533c2c3b
  5 6d9df06f-3aeb-58c9-b330-08535d075084
  6 673132e4-7e13-8e7f-9164-b33d2e022654
  7 e1068734-7b1c-6181-8418-8931bb93c0f9
  8 b0ecb741-5bc6-655e-a965-5e4ce9798bb0
  9 0c3f30a4-86f3-6cbc-8bb8-e0756aca19e5
 10 6f4c65c4-fab7-6cd0-a65f-a81490a1beb8
 11 d09cf641-7cd2-4450-80d6-99b73874dc31
 12 a1bded72-747c-6ca7-b9b3-bb38fb4cdd32
 13 d7fc85cd-395c-6317-b1b8-cec255b739a7
 14 da25c149-26d1-1b86-b1db-ccb0d586f09c
 15 6831117b-694e-6305-88c2-dcba94bb5ac5
 16 82831450-039e-3b58-acf6-64945a8fac1f
 17 cca5261a-862b-1a6b-a8a5-e87c245dbef4
 18 8759ed83-b768-739e-9b5a-872228c9a7b2
 19 3312f621-51dd-5336-b695-d550fbd7b399
 20 eff97e0d-9e46-01f3-af45-7209d6cf06b1
 21 eae4cbe4-9903-580d-bf90-fa97cfbde871
 22 9596f62f-5c64-657c-9a15-eb4202a228a4
 23 84c4a8dc-c132-7f5a-86a0-a10fb7ca0231
 24 f51f6f68-3c3d-3d77-ad48-e386f4c42dec
 25 47a98538-d8dc-5e8c-8c68-de566fac145b
 26 75705bc7-f00a-3886-aa85-dd3646a7c67e
 27 4c6c8b29-6b29-328e-b40e-8fdbc7bb564c
 28 bc4c602a-71b8-2279-897c-d4afc8f1d057
 29 d854313e-fccb-3544-9de2-62f5ddc0ea6f
 30 d4c672af-4c26-31b6-a9e6-31ddedb90295
 31 896b8280-255f-8453-aba9-d08b82e7fdf5
 32 b53ff9ad-4545-2d15-ad4f-12798cebb088
 33 9e02d8bd-3733-4189-8496-737281052d46
 34 e37648a2-6888-38e8-ac6e-1ecf31ead1d3
 35 775952f3-f3d0-84f9-a4dc-28e606a766e5
 36 f73b1460-fb83-2ecb-8267-b51dfdccd27c
 37 3cc78a56-760d-1884-8a41-8e0386f40a4c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 0876586666466163175056735332338243821. Exactly this sequence comes out of new Random(774).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 482 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 37; the post has N = 37 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results