A858DE45F56D9BC9 archive

201210260039 123xjw

explained decrypted filler

3DES(name+title) ECB, 34 GUIDs, seed 8

Metadata

Post ID
123xjw
Title
201210260039 → 2012-10-26 00:39 on A858's clock
Posted (UTC)
2012-10-26 04:39:21
Timezone
UTC−4 · title 00:39 against posted 04:39 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,192 hex characters · 1,096 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210260039) = 232a8bae54f247b36e5da1110977ccb8 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
34
Filler GUID seed
new Random(8).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
33 · predicted N = 34 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,192 hex characters = 1,096 bytes = 137 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210260039 (name+title). Key = MD5(password) = 232a8bae54f247b36e5da1110977ccb8, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 34 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3e40a27a-99b3-8253-8d0a-bf15e8e2639d
  2 26a9d13a-c948-1851-96f0-4d80b865a174
  3 ef0488ad-66ad-3674-bfa4-da47fe325dbe
  4 c5cf8050-b32e-2944-b853-737ebdfcdffd
  5 af9d51f2-d410-7dad-b5a4-04ac61da50dc
  6 d790254b-8af5-453e-91b9-122b6157e234
  7 18b589d3-9ac7-4b9e-93df-50f36de9c33d
  8 bcb09fe2-a8f9-4715-a9f0-cddad49d7483
  9 e816bfb2-f068-8dcb-a369-984cccd8d7a7
 10 16eb7f6f-2208-2e7d-9907-d432036f726d
 11 7b70d70d-8fc8-13bc-8657-0c40ae869a35
 12 eb2fed3c-a113-653c-a6a1-ab97d4b7f8a2
 13 599d7329-db72-103b-8ca4-5719dfd54451
 14 f4dc5f22-a1ca-56ac-9f3a-dd957a4c4824
 15 8a052ca7-ae7d-5108-95eb-12dd32edc985
 16 f8631c93-ee44-003f-83d3-0d7dcf11dc8a
 17 691a92a5-e1dd-2390-b9f7-8e3d3c80a6f4
 18 a40d2106-56ca-82f1-939f-8722688d47d9
 19 0b4660db-5768-89ce-b426-bff66768c598
 20 cc46a9cb-b7c4-382a-b6e8-b772b57ccd1f
 21 7f146fbb-ebfd-7bc8-83cd-a9eab3809727
 22 b43bf46f-446b-72c9-bcbc-1af9cf3c2d59
 23 78df3ae7-be20-3cce-a6ec-e54258e0570a
 24 9d58558e-b47c-71c7-b9e5-2725de160615
 25 49014105-aa7f-4790-af67-06025a21d842
 26 47d3a488-a85b-6381-9658-27d31027b438
 27 5eb7e601-121e-769a-9242-9fdddf516969
 28 8272990a-e85a-5231-a2dc-14b2cc411a31
 29 b56b9b31-10c1-6e53-a60b-fad63289c31c
 30 cf6ec318-4446-4946-ba8a-8b12f1395d6f
 31 302c42d7-9423-1e6f-b3c0-54565045b0c8
 32 6cd7d592-aedd-5351-b64b-18c96da08b58
 33 1127c820-06c6-4061-a80a-1ed059650d6c
 34 7be9f61c-c674-1c4c-9ac6-60a125a31ca1

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8132744482161550288377374675641541. Exactly this sequence comes out of new Random(8).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 33 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 34; the post has N = 34 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results