A858DE45F56D9BC9 archive

201210260141 1240f2

explained decrypted filler

3DES(name+title) ECB, 39 GUIDs, seed 361

Metadata

Post ID
1240f2
Title
201210260141 → 2012-10-26 01:41 on A858's clock
Posted (UTC)
2012-10-26 05:41:48
Timezone
UTC−4 · title 01:41 against posted 05:41 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,512 hex characters · 1,256 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210260141) = 410c9aadcf0a458753bc128b965a6e5e (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
39
Filler GUID seed
new Random(361).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
64 · predicted N = 39 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
10 · 1
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,512 hex characters = 1,256 bytes = 157 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210260141 (name+title). Key = MD5(password) = 410c9aadcf0a458753bc128b965a6e5e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 39 GUIDs as hex (shown below).

Decrypted: GUID list

  1 6688d2a9-960d-2cce-b73f-4a427368cdd6
  2 8ec3a2d8-b949-6212-80c0-31fd762cdd6a
  3 ef4978a7-2b82-08ad-a644-d3dc889586a4
  4 5f1e226a-5349-5fd9-b5ae-7ad075dc8b75
  5 69ba83b3-4741-1084-8ade-cc30f56309b5
  6 2d9464ee-8d23-0cf3-b68e-602dab686ee0
  7 ab95e372-2784-5cad-8093-a9d3851e6017
  8 3e09bda5-308d-4791-9e13-b56bedbcffa2
  9 4aa5c7da-d7af-5ec0-9e05-bd8e6c37e409
 10 c64ad20e-3c3b-378b-9214-76a469a6bba2
 11 646ee8dd-b364-2864-b77d-0ef9e4f274ac
 12 241177cf-3ade-2443-87ad-fd103862343b
 13 e07de3bd-35d8-77ac-9be4-56dc7285c339
 14 3a9bbe4f-c13c-2eb8-8c07-3b48b80e9b80
 15 55f86ad2-3673-6511-b373-76371b81799f
 16 3a9a83aa-dd41-4d39-b6be-ca5a3aa7d069
 17 fae346a4-c4c3-590e-a9d6-f817561fde40
 18 55ef92ae-5524-7860-bf94-cae67f4ed84d
 19 4519bf97-2a73-4e5c-b7a2-02886b3d1445
 20 0df3f32c-8862-0653-b1c1-bc561f8401da
 21 f27b5c00-df25-7545-b188-5e56408604d2
 22 b3326ded-dd74-31fe-834c-ca3b267b6892
 23 1e8f8097-6f90-0018-a7da-267f6e9630bb
 24 e4b6a6f8-058e-1dcd-9b4b-cd8ab3b3286a
 25 9df28a3f-25cc-0aa4-887c-dd6191ead90d
 26 21e397c4-23a9-6722-81fb-9fc34d4cdcea
 27 b4b32216-cf10-2f31-ba64-98c34077c2e0
 28 c918ef8e-2f90-37d8-acbd-87a5fce08e0d
 29 9755a422-b863-2957-ba28-4ba41a591cd2
 30 6cc57ad3-eef0-781b-a3ab-75c595391d0c
 31 2b4a85a0-7318-4625-a06d-8a0ebadb2ecc
 32 acbbdd8b-5478-4134-ae67-4c0a2b03a49a
 33 f70688b9-c2b5-4e3b-b123-6d3d7e9ad011
 34 266fb24b-8a17-04d3-9829-80ac900ac281
 35 cd21bf50-b221-6f2d-8772-7a29a2ce71ce
 36 6529af02-eff4-3f0b-ae97-cb6d334f6326
 37 e70c0934-d1ce-0ff4-8fec-65a68b5d5d22
 38 da6b5872-9341-3bc8-b60c-a33e4b7b1d3e
 39 e47fbeab-a3dd-1d45-bb4d-4ea2a954eea5

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 260510545322726457407301062327444063031. Exactly this sequence comes out of new Random(361).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 64 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 39; the post has N = 39 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results