A858DE45F56D9BC9 archive

201210260129 123zx0

explained decrypted filler

3DES(name+title) ECB, 30 GUIDs, seed 155

Metadata

Post ID
123zx0
Title
201210260129 → 2012-10-26 01:29 on A858's clock
Posted (UTC)
2012-10-26 05:29:43
Timezone
UTC−4 · title 01:29 against posted 05:29 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,936 hex characters · 968 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210260129) = d63eb6c8e1ddf6f3283b8f92ee144818 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
30
Filler GUID seed
new Random(155).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
58 · predicted N = 30 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,936 hex characters = 968 bytes = 121 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210260129 (name+title). Key = MD5(password) = d63eb6c8e1ddf6f3283b8f92ee144818, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 30 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a24f9e83-cae4-6c6a-bec8-da6b5d6f5f21
  2 3d2ad09d-2876-2037-a5a4-97757c79616f
  3 26bbfa6d-cc67-1122-a672-cef3e7de1293
  4 d26e4a73-cec8-5736-9b23-c111025a65da
  5 346a0cef-6aac-1e24-ab4e-6d33314fe5e0
  6 56338a35-e06c-03ff-96c3-bf3466d5ab6f
  7 37ad8884-c091-3d49-9ebb-057b8a2a763f
  8 4753cab1-a9e7-1185-afc2-6026d30f0ed4
  9 06f046b4-cf01-1946-ad1c-f7d9ff3430df
 10 86cba9f2-53e1-3040-89d4-332af193dd0b
 11 ad710828-d72a-430f-bb4c-6a878a49cde0
 12 a4da45b6-5be4-450e-a8cb-348ee53095b6
 13 52bb2228-75b6-1442-bd7e-d4ddbcbb61c2
 14 943842d2-15b7-0787-bbe7-8dbf7215ef87
 15 04f4a211-b2af-4525-ba02-5901a2479a5e
 16 fd61f11c-30dd-7227-98c5-08a7d197ebc4
 17 acb60050-9832-0916-9984-a7544dffe6a0
 18 8c7921db-1f82-0794-97ed-f97b7b5494e2
 19 7fa11e19-10d2-75f9-835a-c939729edfc4
 20 0f99b194-133b-25c6-abec-9b8615ada86a
 21 0febe474-ecb0-3d16-958a-9edc25ce27ed
 22 9d0884c2-b7e5-79e6-bbf1-60dfd927f214
 23 bf2e7a4f-f6b3-13c1-a8a9-70189418e31e
 24 15e98871-38aa-16c9-85a7-12487ff5b92d
 25 5fcc5c5e-fd00-8eb0-93e0-2df2f75dfdd5
 26 7ae631a5-d834-1b7b-8e88-bb24c5f71e90
 27 219db82b-f36f-1abd-9fe6-1787ac87424d
 28 4aef73e0-7d76-6890-b6a6-0763455cdefd
 29 431bdfb0-1082-3e45-a364-39fd05d68b33
 30 142b6cf2-35be-807a-b73a-f585825813ea

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 621510311344104700723711811638. Exactly this sequence comes out of new Random(155).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 58 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 30; the post has N = 30 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results