A858DE45F56D9BC9 archive

201210100900 118193

explained decrypted filler

3DES(name+title) ECB, 34 GUIDs, seed 320

Metadata

Post ID
118193
Title
201210100900 → 2012-10-10 09:00 on A858's clock
Posted (UTC)
2012-10-10 00:00:18
Timezone
UTC+9 · title 09:00 against posted 00:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,192 hex characters · 1,096 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210100900) = c30f9fb2ebae28f98a1f4ac420ba9874 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
34
Filler GUID seed
new Random(320).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
514 · predicted N = 34 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,192 hex characters = 1,096 bytes = 137 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210100900 (name+title). Key = MD5(password) = c30f9fb2ebae28f98a1f4ac420ba9874, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 34 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5fa83533-ec1a-8591-b14a-62c96964b89b
  2 d2f38d0a-0fa1-644b-8df2-81b1f9b138f7
  3 572b0f79-4fe0-3944-adba-42abd9f0d28b
  4 60b833ba-9e3f-7241-8181-44fecbf36267
  5 e7dd2df7-3f80-628e-8061-f2aee7d03de4
  6 1b8d1cfb-575f-1e61-a726-3667845d0c0a
  7 1b08ba91-f225-2d14-8e2e-693c7ca90cb2
  8 8dc71d89-75cb-86c1-8730-a5212d1afbb4
  9 cddee303-e420-5150-b6eb-2bc46dd5e867
 10 e82f90ce-2b0c-2d1c-979c-36d7d84e2ed8
 11 3cd4e4c3-b066-0bc3-b632-17c328b19cd6
 12 a2600d07-72ca-2bc7-8776-2da234a1e93b
 13 5c465559-029a-56dd-899f-85bdfa7dfaff
 14 4e25984a-1f92-82e5-b452-bb1b78a02701
 15 f07a2659-bc7f-89a3-98f6-7f40b6fc73db
 16 46688946-47ab-794f-852c-794efecdc905
 17 d2b12954-a179-303f-a259-8fe85cc45fab
 18 c448576b-d8e9-3204-9eeb-f884255d6351
 19 a331c070-ee95-351a-8f48-4177615cc97d
 20 f3b4c633-8f9f-180e-9aa4-e8c43fc7721f
 21 6da71218-4dbc-31e6-bc8a-0f3cc61fa768
 22 6c9a8b13-2ebd-3195-b340-70bc11a8875f
 23 66c5ad5a-172c-0229-bb53-e72bc991310a
 24 a39514b9-f213-7fa0-a373-c115f896989a
 25 908160d9-7c8c-0adc-a732-0d51d2e14ada
 26 07e1dae1-7669-3f15-b586-eb3ce07b2a9a
 27 bd3bc9ea-4f04-0298-8581-894da48948b1
 28 e1d20e8d-3af6-88da-8252-a4c0b981cec2
 29 b783c0ff-caca-88b1-a46d-758779186b84
 30 5878b274-f3d1-7a5f-9685-c0d5151a85f4
 31 72f36dc6-d0b5-26c2-acf1-4f1e0c6377af
 32 5ca6cee0-760a-693f-b6ec-9464cc332f86
 33 41c2aaac-ebd2-8a42-819e-c876b9184574
 34 1b0bcd4f-ed3a-0b94-80c8-ad80aa4d1d2e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8637612852025887333133070308872680. Exactly this sequence comes out of new Random(320).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 514 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 34; the post has N = 34 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results