A858DE45F56D9BC9 archive

201210252349 123uw7

explained decrypted filler

3DES(name+title) ECB, 30 GUIDs, seed 665

Metadata

Post ID
123uw7
Title
201210252349 → 2012-10-25 23:49 on A858's clock
Posted (UTC)
2012-10-26 03:49:02
Timezone
UTC−4 · title 23:49 against posted 03:49 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,936 hex characters · 968 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210252349) = 29b89ab3057c7be0e5655ed6e5d85293 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
30
Filler GUID seed
new Random(665).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
8 · predicted N = 30 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,936 hex characters = 968 bytes = 121 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210252349 (name+title). Key = MD5(password) = 29b89ab3057c7be0e5655ed6e5d85293, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 30 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e6652a48-8e69-1acb-9b50-b5001971783c
  2 a1fdfd7d-cfe9-8879-a5d7-54d478d01550
  3 5b3da46a-9830-5584-9fb1-13e39c115c22
  4 f71bc73d-080e-4ba0-a85e-6f19f5bbfb17
  5 4a1d549f-d48b-3e62-a61c-149561e1db1d
  6 8d3f5939-d9d2-6073-8423-3c7c132d79e6
  7 30050655-27ac-779f-a22d-040825c4197e
  8 d6e034d2-dc75-0fcd-bfdf-f6b7426ee3cb
  9 85f43dbf-506a-2818-ba81-007e96841aa3
 10 78baf629-e6d4-413c-b5fc-28bb244d5284
 11 702942b8-5fac-194a-bdca-221524288b04
 12 81a86f6c-e790-5d59-a2f5-24bf92426e8f
 13 3644c97f-c1cd-7022-a898-f3276fb7bdc4
 14 47b21ae6-3eec-3b18-a032-08dfce0c7d67
 15 0d15b72d-3302-47a8-81a3-945cdbb6da3d
 16 d64e9b17-7f5f-345b-b41f-ba7c79573193
 17 b8337f0e-f2cf-31d1-9a55-4779ce87b750
 18 a26b6918-be01-275a-80b2-8bbfc4c44d0b
 19 d0470f7f-dbe4-6473-a7b2-c26f5787790e
 20 10914679-ce02-79bf-82e5-ff7d5854b68b
 21 7c58e8c5-6a94-167a-b1c9-11d5693221a9
 22 ffe1c573-a094-8268-a567-06a9f8bdd896
 23 a44afbc9-fc08-3130-a80c-5b68c7d95592
 24 d2248d5a-b40d-3acb-a53d-95389a00b628
 25 299c75f9-26d9-7d62-9edb-6915e053470e
 26 4f3d09c7-faba-2e69-9571-195343d73c46
 27 dc84d811-f940-60ed-8556-d69fdcd76554
 28 7132f05f-1588-6225-8fbb-65519c3f79f4
 29 b8dee6bc-cf9f-2d15-a9a8-67da50cbb6d3
 30 47755173-3fd5-58a9-99c2-bab14fcb79da

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 185436702415734332671833726625. Exactly this sequence comes out of new Random(665).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 8 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 30; the post has N = 30 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results