A858DE45F56D9BC9 archive

201210102100 11a8b1

explained decrypted filler

3DES(name+title) ECB, 33 GUIDs, seed 212

Metadata

Post ID
11a8b1
Title
201210102100 → 2012-10-10 21:00 on A858's clock
Posted (UTC)
2012-10-11 01:00:01
Timezone
UTC−4 · title 21:00 against posted 01:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210102100) = 670d1d25d967f9c1ec2365372dd5a34b (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
33
Filler GUID seed
new Random(212).Next(9) ✓ verified
Run
Run 36 (seed 335,015) (seed)
Draw
1 · predicted N = 33 ✓
Machine boot
2012-10-10 20:54–00:54 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210102100 (name+title). Key = MD5(password) = 670d1d25d967f9c1ec2365372dd5a34b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 49482997-f403-4215-9e17-8782f4c121ba
  2 9d36fd1c-fcbe-0f79-a658-66fa51ba6388
  3 f7c1e8be-4cb5-8d3c-b8da-09b4bf12ae2f
  4 f610ab45-babf-7aff-848a-583f574c7968
  5 a01a7f7f-7d16-82ed-86a8-2189178dadbb
  6 484852e3-65b6-7084-8fbc-a99591008ce7
  7 3acbaf3c-c68c-8e51-b9d3-d1851173571d
  8 5b117dbe-ca42-7189-ae9c-8f6f91a0e819
  9 c7728b8b-9ad0-1e8f-b1ee-f836b8f503f4
 10 e35fc72f-a879-4b88-95b0-45e213257631
 11 600ff6f9-a13d-4b5f-9e0b-bd25928a7b1a
 12 8cd2d2c3-f767-8227-9b7a-9b2cdd2dad67
 13 15b74c90-1609-375a-9d25-631c85d02f55
 14 da9f2efd-928f-60a7-85a0-412b26e8fd4f
 15 b9ac6575-0db3-3a78-a569-7c0dc1d95f20
 16 3a3092a8-2290-3acd-9036-e4e04901dc53
 17 7a0643cd-120a-8ed5-965d-9f589e3ba675
 18 6291e2d7-5f82-306c-a7ed-2b993b296e11
 19 a485e715-a56a-328a-b151-1a2bb6bcbd25
 20 8735d942-042d-3e37-8dbc-8d7347f2f0fd
 21 f58cffc6-a0a1-85a5-b7ab-469c1e199c46
 22 7f21d6cd-dab6-7a0d-81a3-dcbee3525b4a
 23 b81aef02-04b0-7f62-a570-2aae9b64c9bf
 24 8804547f-7ec9-059e-aceb-8ceb45888de2
 25 8cb34db2-675e-488b-a292-569da453dd20
 26 3d19b052-907d-76d2-8d81-4cf6cfe40531
 27 fe331917-6f6a-1c77-949e-bd6310b3acbf
 28 1f331af8-122b-0439-ab18-80f5bc0d90dc
 29 6d9c0110-a191-0219-a899-600409800fb1
 30 c9db8887-5a8d-7a98-9bba-e3611c8b92ac
 31 9f69befc-4bba-4642-97a2-db0e22ce376e
 32 ca32b3c1-99b0-2acc-87fd-83c699f4482b
 33 6c21673e-3c50-49e2-8c9d-4d0eefef264f

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 408787871448363383338770471007424. Exactly this sequence comes out of new Random(212).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 1 of Run 36 (seed 335,015): new Random(335015), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-10 20:54–00:54).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results