A858DE45F56D9BC9 archive

201210091800 116s9b

explained decrypted filler

3DES(name+title) ECB, 25 GUIDs, seed 730

Metadata

Post ID
116s9b
Title
201210091800 → 2012-10-09 18:00 on A858's clock
Posted (UTC)
2012-10-09 09:00:04
Timezone
UTC+9 · title 18:00 against posted 09:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,616 hex characters · 808 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210091800) = f546ae288afa805a1d700849e335f84d (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
25
Filler GUID seed
new Random(730).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
499 · predicted N = 25 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,616 hex characters = 808 bytes = 101 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210091800 (name+title). Key = MD5(password) = f546ae288afa805a1d700849e335f84d, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 25 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5d006732-8aae-0bf2-b872-9f0107b18c59
  2 d01f6bc6-91a0-01a9-8f2c-3e345ff9b524
  3 a9ae4529-777c-0105-96fe-234ae5206d53
  4 83e79c5e-8df8-393d-a347-0837e6ed6d1e
  5 c2aa9016-d57b-7830-b49a-cbaad31962aa
  6 2efbd521-2721-4231-85e8-209309c8d5ec
  7 fc455b6a-87c2-8821-b7c6-5f9a7d1870fe
  8 83a32a9f-0ae2-6aa8-ada0-5bb44bdfb90c
  9 8d533d8c-2125-2ac2-ab7e-6bbe2aaa9278
 10 3b3db09f-4cfc-4fc8-a6bc-19207c45ce7c
 11 4f3bb99a-e76e-0540-808a-25a90ed9a45d
 12 a5e6427a-1057-34c0-b864-0854629648c9
 13 6ac639b8-171d-4184-af46-30c5636f2e57
 14 e60526ef-a4b9-26d3-9f69-844204417cdc
 15 dfc462cf-97f6-80e9-b052-c8884b944214
 16 a3400a67-69c6-8fac-a73f-c8b7ad64fc76
 17 02e0737d-89a0-6c4b-9d6e-6cff5ca8b22a
 18 fa42e7be-c0a6-536e-8989-0ab15fff12d7
 19 34704e26-be72-3e28-910f-357321c8b7da
 20 53caa0b5-f4ec-83f6-a29b-1c05a5f7a542
 21 c8e67071-62a3-784c-957e-d645f79d30d1
 22 57625eaa-7d30-85fb-a277-53dbd96d4a23
 23 4ed18d9f-60f8-3c24-aec8-6679146e6c6d
 24 9ea4d5be-ca38-0551-aa5b-e4aa504928a2
 25 3ba32e0c-8938-2604-8cdf-76677e8d6278

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 0003748624034288653878302. Exactly this sequence comes out of new Random(730).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 499 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 25; the post has N = 25 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results