A858DE45F56D9BC9 archive

201210260005 123vr0

explained decrypted filler

3DES(name+title) ECB, 33 GUIDs, seed 75

Metadata

Post ID
123vr0
Title
201210260005 → 2012-10-26 00:05 on A858's clock
Posted (UTC)
2012-10-26 04:05:08
Timezone
UTC−4 · title 00:05 against posted 04:05 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210260005) = 18c2a281c7fab15018c18444a2ff24f7 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
33
Filler GUID seed
new Random(75).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
16 · predicted N = 33 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210260005 (name+title). Key = MD5(password) = 18c2a281c7fab15018c18444a2ff24f7, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 f08546de-3d99-8823-b535-bd0216c916b7
  2 6ad2dbb6-b572-77f4-9551-d0cb32008b6f
  3 ba9644fc-92e2-19e5-b006-26989d06b2e6
  4 908789e1-8ca0-534f-9637-bdcdc23ebfdd
  5 df477489-16ff-0174-a1bc-dfeebefc487c
  6 9a49c16a-2a1c-08e4-b250-45007f6fc8cc
  7 13cd8e3d-e91a-4e78-8a81-fa1a0d7fab89
  8 a9929e60-3c91-03ba-95bb-bdf38fdc34bf
  9 d71c9e8c-a43a-29c3-8ff2-08536bf81176
 10 beae53a4-0168-89e5-a6ad-40c2ab5d44bb
 11 da125731-3101-4309-998b-a1485d63da07
 12 0d4ec7e1-8791-00bb-8ed3-56b29bd0cd8a
 13 f7c3a001-7e01-1f02-a6d8-c8f8535c9eec
 14 5a8117ef-a755-4e22-8297-48225a440abd
 15 0f4b2c75-664a-45a6-ab7f-c168a7a145d8
 16 9bf25b6d-a10f-7ea6-ba9e-8c9ff7f87b2b
 17 0b76d6e5-fe2f-3f79-a779-90b31375a0e3
 18 055bc688-5214-4ad6-b3e9-d8bfa2a57acd
 19 dba32eac-c32d-6491-b95e-c6c5516ae76a
 20 c8133599-d7b6-3298-8af1-9cc7bf000846
 21 8e8708c9-8351-70ce-bafb-c1f0ccdd8391
 22 a389010b-a27d-2525-b589-38c1288e4beb
 23 6e332816-01cd-6976-a6f2-0349851d3cf0
 24 0e094656-0a3f-2d1f-be01-bfb5030ef169
 25 47793f3d-b862-0871-8a93-aec8332459b4
 26 e1df18e2-0282-6505-9b89-7bc58541c7a9
 27 df5f3a12-55f0-3565-b30a-b5025a23b15e
 28 c7f6f8b0-3049-1726-9c45-b61fe857e756
 29 856e338c-e140-2827-b4af-81661e511947
 30 8b291056-3abb-4c22-b2cc-852df8067399
 31 6c65e555-1f24-79e2-b8c1-31dbb127e9b4
 32 7ff40ee5-0e8c-1f93-813e-066791fc5c75
 33 609f4605-b6a7-46bb-bfdf-ff4bde0622c2

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 871500402840144734637262063124714. Exactly this sequence comes out of new Random(75).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 16 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results