A858DE45F56D9BC9 archive

201210260041 123xn3

explained decrypted filler

3DES(name+title) ECB, 28 GUIDs, seed 599

Metadata

Post ID
123xn3
Title
201210260041 → 2012-10-26 00:41 on A858's clock
Posted (UTC)
2012-10-26 04:41:22
Timezone
UTC−4 · title 00:41 against posted 04:41 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210260041) = 091403b398f2d1911385abd5265af66e (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
28
Filler GUID seed
new Random(599).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
34 · predicted N = 28 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210260041 (name+title). Key = MD5(password) = 091403b398f2d1911385abd5265af66e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ce3f90ad-94fc-5d09-aad7-1a3854ddc97a
  2 c8cdb161-d3d9-5db6-b22d-b8b6367c0d51
  3 d4302bca-4d6a-4668-9bf7-2b9d1744fa1b
  4 8977e8d2-46ac-3236-96c4-727e035ce9cf
  5 bb59245c-4ae9-5724-8df8-f1ca68cd799b
  6 73b831d4-d879-0472-9343-315736585b66
  7 c05a776b-94b5-2fc1-87ce-0b071e9c832d
  8 9b65828d-0093-86d8-922b-fb4e9bde2ff4
  9 6b5034b1-f2f4-0cbc-84e2-813b68ab36b5
 10 844374d1-d5ac-1574-b2ea-403073659ea6
 11 b8b506bd-e97c-5179-aca9-11ac03fa9f64
 12 0862e8a8-fffa-1c97-9eff-68112e8e3913
 13 478917fa-648c-3fd5-aa71-e304fce50d44
 14 eb9dcee5-504f-0763-b844-6763f56b16e3
 15 0486d8b4-dc24-225b-a743-33d3bbe2a697
 16 bcc236ab-21be-18f7-bded-905b36198326
 17 46b0879e-8f20-5ab5-ab8d-9fb170720aa6
 18 2072762e-f912-3986-b5f7-916c25c18a5e
 19 a1fed8f4-31f9-874c-94e5-50e231b4e0bc
 20 aa76f423-4e66-2f41-ace3-3f33b9b34e47
 21 f5d56b74-e4ce-3b47-a586-d8e4a8cc748a
 22 e3b2c469-76e7-7c59-9522-53fe40c2c765
 23 788387b4-baa9-2d62-8e65-e6ccc2de1eb5
 24 ae75fec3-4c68-2fc9-bff3-43c6eacd27a9
 25 b46f3c41-4f78-3904-b32a-75aa31bd441b
 26 9a230a8c-6bc6-7752-93f8-ae4d793c2b98
 27 4839ed61-fa23-8ed7-87eb-fd0b82f41169
 28 40ef8e5d-065d-7823-b546-2739b4c85f3b

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5543502801513021538237223787. Exactly this sequence comes out of new Random(599).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 34 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results