A858DE45F56D9BC9 archive

201210082206 1169cm

explained decrypted filler

3DES(name+title) ECB, 32 GUIDs, seed 246

Metadata

Post ID
1169cm
Title
201210082206 → 2012-10-08 22:06 on A858's clock
Posted (UTC)
2012-10-09 02:06:40
Timezone
UTC−4 · title 22:06 against posted 02:06 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210082206) = 124b0a32c47386a70b22c0e682a0e37e (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
32
Filler GUID seed
new Random(246).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
486 · predicted N = 32 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210082206 (name+title). Key = MD5(password) = 124b0a32c47386a70b22c0e682a0e37e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 bc6bd3f3-8903-2f1f-868a-030541d7d4a6
  2 ab4fe467-a5d9-8a93-8f81-1a247989b850
  3 b7e74d4d-1127-6b7f-9e04-0e65cada5ef4
  4 b631fc04-4164-0526-975c-cde7a5554634
  5 d6bad777-411c-246c-a0ea-df082dc8c3da
  6 a5c50782-ff19-47b8-8ec4-a74cb9e76660
  7 98c337e1-c00b-19be-87ba-b46c9a6ca04d
  8 168dc466-589e-75d4-be6a-d1b9b7cf5b9b
  9 d87c4126-4b71-3fe1-801c-1e7d2128744c
 10 542b6a37-5c3c-824b-9cbd-fb55000a717d
 11 3c46f8f2-bd3f-4e23-bebb-c8894583e29a
 12 01cc1837-7c55-4aab-8720-548c64a2fce9
 13 1fa50019-22f3-61ce-8549-e250cd758ae2
 14 35bb8f95-4546-4266-907d-c1919dd76ab9
 15 122a82a9-6955-1636-b81e-3250a8856fec
 16 0e92270f-368e-5b94-97e3-a1b35c1778e9
 17 0018d023-fa6c-242c-992a-f7d1e6a15cc0
 18 d91e771c-4b20-420d-afb9-4f7134d524f9
 19 8f61aa3d-055d-322f-bc12-a7224060db78
 20 981481df-91c9-5044-9671-b62eb9eb4e94
 21 6b5442af-5a93-4d26-a26e-c5add23583ff
 22 dc5f46b8-8894-163e-99f3-d90a78efc717
 23 9c0dc73d-dce1-5d9b-b69b-a271400338a9
 24 2f476cb2-5590-85c2-8978-28777254bb31
 25 de0fd976-43ce-791b-9af3-388789b8bee5
 26 df8ea524-4b1d-66ad-ab73-0ebbc74fe490
 27 b09cc350-51b3-3924-9559-5fac9511d16e
 28 31f6880f-3f04-16fd-a51e-8ff235d8148d
 29 83c591ab-a988-41c8-a122-49e37b5407f8
 30 ec45296f-8877-1e6e-87f9-1c7a046fc1dd
 31 6c28626e-bb27-0157-ad32-22c7a948b532
 32 dd5446f0-50c2-2bb3-b5db-6dcddefa98a7

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 28602417384464152435415876314102. Exactly this sequence comes out of new Random(246).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 486 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results