A858DE45F56D9BC9 archive

201210260029 123x1r

explained decrypted filler

3DES(name+title) ECB, 34 GUIDs, seed 644

Metadata

Post ID
123x1r
Title
201210260029 → 2012-10-26 00:29 on A858's clock
Posted (UTC)
2012-10-26 04:29:18
Timezone
UTC−4 · title 00:29 against posted 04:29 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,192 hex characters · 1,096 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210260029) = caf106c9015ffcca2afc57fb5f282646 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
34
Filler GUID seed
new Random(644).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
28 · predicted N = 34 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,192 hex characters = 1,096 bytes = 137 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210260029 (name+title). Key = MD5(password) = caf106c9015ffcca2afc57fb5f282646, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 34 GUIDs as hex (shown below).

Decrypted: GUID list

  1 fd994c19-4543-11c2-86a7-612e64fe2199
  2 6857db9e-2e90-7312-82c1-84402305def2
  3 3374e075-28f8-822c-944e-a92fe8d3d54c
  4 5b715bd5-72d8-0987-83cf-d171ec0672ab
  5 8f398f9c-a100-8bd5-9594-5677fed3396b
  6 52e05803-a82c-34ff-929d-de2d6e4b0a93
  7 c5495bba-8a1d-48a8-90ca-134ab872f5d5
  8 38565320-81c6-43cb-b279-080ca6e70f8e
  9 554d3e05-1a93-5ed7-ac86-ea205db86120
 10 df47fba4-5050-693f-90a1-3e1e9328347a
 11 9ef56357-aeb9-61e0-8537-b320140cf4e6
 12 8495aa3e-3848-2165-86db-6f381aebb648
 13 1f259a73-8a72-3f29-9d1d-b40456db478f
 14 a44f6166-e4d5-42ae-b65c-aff1122c9b26
 15 9e59e351-1139-66a5-94d2-05a39a5f4f62
 16 e043a6e8-6d5b-1487-b375-8cf1c77f70af
 17 ab1758b1-cb76-525f-a23a-31fbb3644ff8
 18 000ae47d-ae1c-2762-a835-4acafe9e6cff
 19 d6b028ad-ef9e-0ac3-9bb1-ab8651b46680
 20 456285b4-33ad-612a-b6e2-d8267e611caa
 21 4e8c7e60-7b53-3330-b880-e82990ad1045
 22 a7a722de-88ce-70e2-af0d-dcb9192eaa50
 23 729234bf-406b-7b42-8f39-15531f7da225
 24 b82e5cdc-8799-0bb2-854c-16078a84566c
 25 f972443e-b0a9-7186-b407-16594556dd1b
 26 1f0df717-de5b-6f55-ab3d-db7a718b2100
 27 4ac95dd0-ce9e-5877-8a2f-0b6b04cb2378
 28 fa6b4dcc-5d7f-60e8-bf61-6c8cdead2357
 29 9971d41d-e590-3e1e-bf4a-0ec944baad1a
 30 41480e7d-1e1c-69f3-87d1-82f65b73bd67
 31 7343a1bb-ba48-8545-bd0c-dc501fb3a925
 32 871d9744-e54d-03cd-bceb-52561edd7c04
 33 471d34ff-1337-2c8a-83b2-1f2442ea3ca1
 34 8840815f-19d2-114b-9af9-2564fc0420cb

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1780834456623461520637707656368021. Exactly this sequence comes out of new Random(644).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 28 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 34; the post has N = 34 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results