A858DE45F56D9BC9 archive

201210092100 116wvj

explained decrypted filler

3DES(name+title) ECB, 38 GUIDs, seed 345

Metadata

Post ID
116wvj
Title
201210092100 → 2012-10-09 21:00 on A858's clock
Posted (UTC)
2012-10-09 12:00:06
Timezone
UTC+9 · title 21:00 against posted 12:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,448 hex characters · 1,224 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210092100) = 148b7ef3d939b8ae8d62f5647dce399f (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
38
Filler GUID seed
new Random(345).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
502 · predicted N = 38 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 1
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,448 hex characters = 1,224 bytes = 153 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210092100 (name+title). Key = MD5(password) = 148b7ef3d939b8ae8d62f5647dce399f, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 38 GUIDs as hex (shown below).

Decrypted: GUID list

  1 adf6a315-c7dd-8794-a4b4-2f6f5dd97184
  2 7eb18e03-7122-0ea9-b3e4-bceaa7edfb03
  3 9df6e7ba-1ed4-8326-9e1d-494ee92e302c
  4 21f4d842-96c4-1358-99c3-4ce0c72fb481
  5 694ab59e-ffc1-88cc-8558-1a380ae0c25c
  6 144dc67a-5947-08ec-81bc-36faf25fcfc0
  7 d059d732-bf9a-450f-954d-10854a14b079
  8 6bd526df-bcb8-4311-9a3b-a5e3e3e4f5fa
  9 4ab08cf6-7a28-5fe8-ae5e-d1c07c6566ef
 10 b0404b25-23c0-4745-8f64-926715848718
 11 0cbae3e6-a675-4f3e-8971-c0746bdc1b18
 12 d8e32324-1a33-7167-aa49-cdd2216afa74
 13 521b57b1-8f69-7ce9-92c0-7ee9b46852b0
 14 54a2c864-c949-8678-8df5-b8719e320c98
 15 f1277cac-30dd-4ee3-9be8-6236b73dd8fd
 16 ab88a3c8-35f4-46ef-b5c6-9c7969944913
 17 3bf40cfd-bfc6-7a82-83ef-9ace12413d15
 18 3088b672-4ccb-8fd8-8443-c72d3c75dd59
 19 e7e6a0c8-af71-0a2a-9950-058816f9348a
 20 f475137f-9e50-8c72-9986-69b3208d94f2
 21 8c0543aa-b4f0-5dec-aeb9-39dac1d24d9b
 22 d84dc8bb-da2a-4b88-8b80-e2b45d89ecd4
 23 2772828e-7571-2170-b824-49d7c0a5e840
 24 9b90e356-2e20-5610-aadb-dc6424b459fb
 25 c1649a72-bdfc-4e50-869f-ce8aab606cca
 26 05cb756d-eec4-3fb9-983e-8f6e41f1e1a1
 27 a08192b3-b1d3-4338-a815-771739d5f51d
 28 39cd9436-b45b-49f6-9ab0-4ed26311c397
 29 c87f76ad-5d79-7193-a4b9-2d8dacb3e93f
 30 00fa82ce-6ff7-866b-97a3-23cd3190ce2d
 31 01410850-af29-4968-b64c-c6b562ee20e1
 32 15e37507-9eb5-2efa-a37c-76c6e0f32418
 33 143a6773-3dd3-05bb-93d3-30ea9cff9c98
 34 2579b0d5-2e22-5b03-830b-e10532ff70fb
 35 e9918c49-f739-0802-b11b-38d9b1c9599f
 36 41655321-6a39-69ee-8210-c0577d030cd6
 37 e9f0e311-f330-7e9b-9235-4340ef73d03f
 38 30dbd24f-ab28-4cc6-adbd-c37f2c35d22d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 80818044544778447808542543447842050674. Exactly this sequence comes out of new Random(345).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 502 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 38; the post has N = 38 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results