A858DE45F56D9BC9 archive

201212040832 149ebi

explained decrypted filler

3DES(name+title) ECB, 26 GUIDs, seed 642

Metadata

Post ID
149ebi
Title
201212040832 → 2012-12-04 08:32 on A858's clock
Posted (UTC)
2012-12-04 13:32:22
Timezone
UTC−5 · title 08:32 against posted 13:32 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,680 hex characters · 840 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201212040832) = 66267b3167cbded23cc10f00db83609e (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
26
Filler GUID seed
new Random(642).Next(9) ✓ verified
Run
Run 39 (seed 1,106,402,812) (seed)
Draw
33 · predicted N = 26 ✓
Machine boot
2012-11-20 22:02–00:02 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,680 hex characters = 840 bytes = 105 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201212040832 (name+title). Key = MD5(password) = 66267b3167cbded23cc10f00db83609e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 26 GUIDs as hex (shown below).

Decrypted: GUID list

  1 aadfbb78-21ff-1cb7-bb9c-ed40446f4407
  2 89851ac5-7d5d-167b-ac2b-2aa56631b7d0
  3 2e5c52cf-02d9-44f4-bd09-4e1acb3c8625
  4 58d6b4ad-be64-5616-9004-87299065ae28
  5 cb5d5f24-efd5-0669-8e35-679d99954f18
  6 1bab4db4-790a-55ef-b638-da62491de935
  7 454ed8cc-1b0a-522b-ae0d-d5bba7ffedef
  8 788c3e70-9ca3-48ef-b9b2-3d67d9613593
  9 36bd2b12-2542-3ebb-a886-5f224a5e0d19
 10 c93dc181-d3ea-03df-83d8-7b515d69e9a5
 11 a0dfb1f7-d3f4-2e44-8e61-01c997fd1253
 12 8568890a-99d2-65ef-becf-278a70a00446
 13 62d33dea-7057-858b-b616-ec43ef11d5ab
 14 298ffbf8-96a0-46ba-a7f9-1a073e1c9b64
 15 31527c67-15e5-3091-bc47-83b5a37496d8
 16 c9a341e3-216b-833e-8c42-e0d168b2cbc3
 17 8271cfab-0e4a-6294-ac57-a205e2866e15
 18 3ee24491-07fe-0d4b-bd90-07e9671aa40c
 19 b7454938-4c9c-03e9-a5d6-6d7bfbe5e45f
 20 ea40903c-a897-8eb0-ba58-ce9ffbbb09f1
 21 dac11342-75e0-196a-bf3b-a0a0573f29b5
 22 42cbfb3e-62e6-3496-86b6-f686acdae260
 23 4fc45f46-d966-47c8-86c7-6279cab378f8
 24 a88ceb41-c7d2-215a-a5e3-245b72006f9b
 25 d06ba3bc-bf18-5c04-9176-77d8e38f66e2
 26 92869599-ab80-4921-ad9e-ca57bf11b8fd

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 11450554302684386008134254. Exactly this sequence comes out of new Random(642).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 33 of Run 39 (seed 1,106,402,812): new Random(1106402812), Next(8,64) per post. The RNG predicts N = 26; the post has N = 26 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-11-20 22:02–00:02).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results