A858DE45F56D9BC9 archive

201210260017 123wd5

explained decrypted filler

3DES(name+title) ECB, 41 GUIDs, seed 9

Metadata

Post ID
123wd5
Title
201210260017 → 2012-10-26 00:17 on A858's clock
Posted (UTC)
2012-10-26 04:17:13
Timezone
UTC−4 · title 00:17 against posted 04:17 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,640 hex characters · 1,320 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210260017) = 822e41e2bf0148899d9996783c28d0a0 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
41
Filler GUID seed
new Random(9).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
22 · predicted N = 41 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,640 hex characters = 1,320 bytes = 165 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210260017 (name+title). Key = MD5(password) = 822e41e2bf0148899d9996783c28d0a0, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 41 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9c11d43f-b7b9-38f0-9954-55907d55b9fb
  2 9973c7cf-22bd-4fae-9df6-745f02137745
  3 0e6007c9-2f5a-0609-9c84-8da820875464
  4 b5bd1e40-785f-4418-889d-42cdaa484f77
  5 b86b98c5-aed1-2e5d-9847-3ad514bcd483
  6 3d93aabf-65cf-35cc-ba28-0096179e5da3
  7 65290754-ff97-831c-903d-05c8abbd279b
  8 39308704-b87d-8e12-97f8-cffc38f618fe
  9 732fc489-ef1f-01f0-94af-52788940d74b
 10 ea6b7a30-bf73-586e-b82d-f991a6995e26
 11 6a44ca0e-806d-8695-8ea5-0e1f2c20c07d
 12 642aa197-575b-450e-8ca2-420e06c8a784
 13 391f1158-ca3a-7309-a937-2372235bc55f
 14 8811bc49-bec9-1385-80b7-fa8ef357ff73
 15 0a0cd1f9-4b65-2b35-b8c2-e7e00ee472f2
 16 038997a5-3c64-5d61-b206-ef5e7b15148c
 17 bebd4f0f-c97a-52c8-b2c2-90dac8f83b77
 18 af44cffd-7495-5993-abdf-8e446dc742d6
 19 9172f0c8-95b8-8f9d-ba1d-f89e0a565be1
 20 be657ca1-0d9b-7c31-a156-248044fb35ab
 21 d2eab157-8186-076e-9f37-604ff8f2879b
 22 79bf9ee7-06d6-02ad-9e54-32a0c35849a4
 23 74ce149a-1d7b-4293-8622-fa8148f2aecd
 24 93062b4b-ecb2-1965-969e-e1880e85c480
 25 4a87955c-c1a9-58f1-8a15-60e2eee7816d
 26 f220ce36-8da5-212d-9135-b16783ed93b4
 27 becfb108-7189-66a9-ae82-e39df463ec63
 28 ac412a41-e8ae-239c-a912-6edd6d55ac35
 29 f2362683-be8c-00aa-9a74-fd2cadbccc10
 30 05518a52-e7eb-2115-80b9-641a23d3ab1c
 31 c885bf9c-97e6-4d22-bb5f-96af58a8c90a
 32 96f21bf9-bfa5-712e-a4fa-852daa496d47
 33 4b1f5687-f191-846c-a310-695f9bd4b300
 34 1b37f15f-123d-19f5-a17c-dad4bc0bc141
 35 89a3cb89-c9c3-755a-97cf-02a85a5a8c7e
 36 57743294-983a-1e8e-a841-e565ce6274b3
 37 20b86701-7caf-41fe-8454-ac49dead3ccf
 38 4e3e6dbf-d622-4b71-8924-eda4ccbcf522
 39 3b3ea56c-3a11-7aff-aca1-e79f97c5a97e
 40 c52d9399-97d7-0e02-b215-bf1a5ee43cac
 41 3117d980-b036-34d3-ba55-d7951c5e8c15

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 34042388058471255587004152620247817144703. Exactly this sequence comes out of new Random(9).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 22 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 41; the post has N = 41 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results