A858DE45F56D9BC9 archive

201210260003 123vn8

explained decrypted filler

3DES(name+title) ECB, 25 GUIDs, seed 769

Metadata

Post ID
123vn8
Title
201210260003 → 2012-10-26 00:03 on A858's clock
Posted (UTC)
2012-10-26 04:03:07
Timezone
UTC−4 · title 00:03 against posted 04:03 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,616 hex characters · 808 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210260003) = 86da09d388bc19dfe31a79891f2a7322 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
25
Filler GUID seed
new Random(769).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
15 · predicted N = 25 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,616 hex characters = 808 bytes = 101 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210260003 (name+title). Key = MD5(password) = 86da09d388bc19dfe31a79891f2a7322, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 25 GUIDs as hex (shown below).

Decrypted: GUID list

  1 13f1a3b8-d038-4251-afae-d81cde1737ec
  2 fa2faabf-4944-4e41-b978-31e0ab884403
  3 f1fb98a1-9040-273d-bf8d-3c450986191c
  4 4c2fdc20-3210-6973-aebd-3bab277618eb
  5 d0cfa4c9-cc40-381b-bd11-8b8ad2ef0496
  6 99ce1ec9-1361-5d1b-8ae4-50cf1ac09f2f
  7 5041882b-d8b9-4764-9067-b96a17541c54
  8 59a69aa6-56fd-2dbe-ad6a-96e23c6e8cc7
  9 9e97514e-fb24-1f17-b518-26b1931af3af
 10 e4e7fd66-f340-7f12-bfd0-7cce65848e57
 11 6691cca7-9fd2-786c-80c6-dbeeca14c167
 12 5b2c5b52-ce1f-7889-b090-74f33cb49781
 13 96b363a1-b406-2cb6-b52c-a7e1caf50568
 14 f958e781-093c-4a9c-8bbc-6e9259010768
 15 dd5f293f-02bb-29df-945c-2e4a7354e433
 16 de20715c-cb6b-239d-999f-fded7891f15f
 17 94b973b0-3efd-16eb-83b0-e315ebdf51cd
 18 df1a737f-ca58-6dd3-83d8-7dcbcabca961
 19 26cad0f4-a1ea-446e-9ec3-a825e872afe3
 20 895f42bf-4eb4-0687-bcee-5e417fc72db5
 21 0ee8fd4a-efdf-8a35-8872-65b7c6127248
 22 2e71e3f9-6a6e-4cd0-bf42-65652e7be317
 23 2ee1a4b0-5df2-8fc1-93af-ca672c9317fc
 24 bdf68a94-ac6e-6792-b343-307228d47b24
 25 34caa9bd-8ad1-04c4-b2f1-5d66f7a92590

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4426354217772422164084860. Exactly this sequence comes out of new Random(769).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 15 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 25; the post has N = 25 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results