A858DE45F56D9BC9 archive

201210260015 123wa1

explained decrypted filler

3DES(name+title) ECB, 25 GUIDs, seed 403

Metadata

Post ID
123wa1
Title
201210260015 → 2012-10-26 00:15 on A858's clock
Posted (UTC)
2012-10-26 04:15:12
Timezone
UTC−4 · title 00:15 against posted 04:15 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,616 hex characters · 808 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210260015) = b6ab91ecee4db3c2011fdc0c558e3609 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
25
Filler GUID seed
new Random(403).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
21 · predicted N = 25 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,616 hex characters = 808 bytes = 101 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210260015 (name+title). Key = MD5(password) = b6ab91ecee4db3c2011fdc0c558e3609, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 25 GUIDs as hex (shown below).

Decrypted: GUID list

  1 54c1c104-72fd-2604-850e-c84e0b84958d
  2 3301d0fe-1c99-0d9a-a57d-66157b81338c
  3 3dc458cd-1617-4787-8f45-484bc4210172
  4 8dd991b2-4e4d-5857-810a-cc097982c951
  5 1c099d7e-ac6c-1ca0-ab7d-bca6e672316f
  6 1c1f5a18-1eea-6c1b-917d-3484f69c939a
  7 9f37d2da-917b-475f-bf07-e670f0254640
  8 9ae4623a-9d49-5efa-9ccb-477f3f17cd1e
  9 8f184ac9-973b-7174-97d7-0fbd64090bbb
 10 1bc7730d-ad63-75a7-9815-3c2097b3266c
 11 b849b66f-decb-1ee5-a7d9-9336b8a24e08
 12 921d653a-6124-0e35-b67a-3e6b8798d9ce
 13 1d30c696-f624-65b6-8e2f-3e0d5c3b9031
 14 691511da-4f4c-19a6-977d-a7df22e50d7e
 15 ff4be909-513c-0558-a1f2-563d82574b4b
 16 feb3258c-dcd7-6532-b85e-003db843468e
 17 69b0f88a-f66c-2374-973c-89fc54059ae9
 18 2b13b4f1-7b73-77a7-9e3a-bf319fadee21
 19 b975b1d5-b189-584a-9bdc-3b962c5c4fee
 20 e2339ba7-9d9c-37ac-afe5-497aa5aef6e3
 21 143eeb2d-3b2f-3f67-82fb-022dbd1f6cde
 22 cfed9a39-7706-6d7a-ac65-11c9653ef916
 23 a6bd6ad6-55e7-025e-b598-7acd2e759dc0
 24 96d4f8f0-50cf-7e0f-9de9-7fd7a0e2d4ae
 25 9dcf085e-abbc-1479-afb9-14c3aa3c8dec

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2045164577106106275336071. Exactly this sequence comes out of new Random(403).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 21 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 25; the post has N = 25 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results