A858DE45F56D9BC9 archive

201210260111 123z48

explained decrypted filler

3DES(name+title) ECB, 38 GUIDs, seed 860

Metadata

Post ID
123z48
Title
201210260111 → 2012-10-26 01:11 on A858's clock
Posted (UTC)
2012-10-26 05:11:34
Timezone
UTC−4 · title 01:11 against posted 05:11 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,448 hex characters · 1,224 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210260111) = 8bfa74da81301ca406031ddd91a92c13 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
38
Filler GUID seed
new Random(860).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
49 · predicted N = 38 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,448 hex characters = 1,224 bytes = 153 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210260111 (name+title). Key = MD5(password) = 8bfa74da81301ca406031ddd91a92c13, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 38 GUIDs as hex (shown below).

Decrypted: GUID list

  1 85aef879-f6f9-048e-a6aa-f7eb823d4a53
  2 6f780517-66ad-1bf7-9268-9deda37a62ef
  3 06ab0d1b-8ecf-8443-a45c-896250802ebf
  4 d15e8e8b-d885-1575-9fda-c00e5310a468
  5 cbddbe1b-7bea-43cf-ad93-93c358793ce3
  6 d2a99db9-6f88-056a-9b05-709be9963770
  7 8295e37c-cb53-26cd-9206-e3c0f5f369e6
  8 f306f104-a466-84a7-9398-867ff8c5d916
  9 851f19fe-5e40-39d1-a8bf-9b15ea3d45a0
 10 171c9475-c891-3a4d-a1e4-902becbda3f3
 11 f697fe05-0906-72ef-9fee-ea0f27be7227
 12 d65c3cc0-9e6d-7368-a4ef-32d056913f55
 13 8fe5aeab-d034-73ec-9f44-8006c731fb4f
 14 759f29e7-5e66-8bbe-b59b-893d4787d302
 15 07b7eded-2503-81b8-b61e-1675ae28417d
 16 313c772b-d1ef-1c74-9c87-850e92b31533
 17 a0cc805b-11b0-360c-9fcc-9b561bdab7d4
 18 aea4cfb9-72c5-1eba-9119-94bd14b15031
 19 42cc371a-0332-8039-a186-e0d190c0c6fe
 20 a6bc99aa-3184-20d7-a265-7753cc097bc3
 21 aeb52d4d-de86-0311-8cd7-3ea6c8a3827d
 22 fad49e88-0d9d-73b2-9632-84806f1e2ae3
 23 f0560d47-9628-31df-9830-63bd4d860bc0
 24 52d28db4-9d9b-4061-9799-5200283b5bd3
 25 826bbea1-ecda-8387-9a4c-a747638937a1
 26 2cf6432b-b78e-5a9a-8b84-fcb7b94c5056
 27 a73e55b0-38fc-2880-9ad9-2252e5149558
 28 4892274f-b95b-45c9-8b17-bd59e3845a47
 29 236a1449-81cf-0d30-855a-c57b8965cbba
 30 845b8ad8-0830-6f4a-987f-62bd7d07f0ca
 31 551c91e2-e639-6812-9c4f-91e32edfebac
 32 0853dd64-696f-8431-99b3-3f77695642b3
 33 ff6fdd5c-cadf-1d71-b44a-6ae6ba01aff4
 34 042b0003-a589-4675-94d7-81e3390f9dfd
 35 59a07e4f-dcd1-8658-b1e7-99e096187d06
 36 725f152b-2c33-0355-95d7-3324c9fac928
 37 4a2f5c6b-46bd-330b-ad23-b52a5a652827
 38 a690447b-5901-4564-92ad-25598076f1ef

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 01814028337778813182073485240668148034. Exactly this sequence comes out of new Random(860).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 49 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 38; the post has N = 38 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results