A858DE45F56D9BC9 archive

201212070800 14ewbi

explained decrypted filler

3DES(name+title) ECB, 39 GUIDs, seed 751

Metadata

Post ID
14ewbi
Title
201212070800 → 2012-12-07 08:00 on A858's clock
Posted (UTC)
2012-12-07 00:00:22
Timezone
UTC+8 · title 08:00 against posted 00:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,512 hex characters · 1,256 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201212070800) = 1fa7d56ad3193be371df67985fa26966 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
39
Filler GUID seed
new Random(751).Next(9) ✓ verified
Run
Run 39 (seed 1,106,402,812) (seed)
Draw
74 · predicted N = 39 ✓
Machine boot
2012-11-20 22:02–00:02 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,512 hex characters = 1,256 bytes = 157 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201212070800 (name+title). Key = MD5(password) = 1fa7d56ad3193be371df67985fa26966, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 39 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3a0fe8e5-586f-0cb5-9ae5-0e73444cbb4d
  2 1fba5e94-905d-17e1-b2f4-64dd15ad159f
  3 4d126590-9d10-6bd4-a3b7-1f23be2df914
  4 0d45c39e-7311-7773-8a5a-56e75ff203fb
  5 fe5ccf11-ad98-2e2d-9749-be2bee3ef8d5
  6 88745aca-e66a-7bc3-b485-ddce292644bb
  7 5a2a5563-8d41-3efa-a3bc-9c22c9a503bb
  8 b337873e-5534-173d-8f5f-1c61720f9563
  9 ead36552-361a-7a16-98d9-6cfd0710db4a
 10 cc9736f8-a66d-11ca-adb2-e6137d823d13
 11 78680378-5eb1-5052-bf49-11e05aa1aed6
 12 d65d54f5-11cb-797b-9e62-b5040071ce6f
 13 b5d6c6cc-60b3-8dbe-9a04-22f00b8308f9
 14 6a2708dc-5c2f-1ce4-a150-0be19ab20cae
 15 df67ea92-aa29-5c0d-99e7-c596e409eb12
 16 1c2398a2-a7cc-056d-885b-a5153840a1a7
 17 146e9abd-b5f7-485a-bbd4-87f206fb7eb6
 18 16361074-cb5d-56dc-94f6-e13c1e50bf83
 19 80a6457f-7e9c-051b-820e-c449b9aa92ac
 20 bdd1c6b2-94b6-07e7-bf4b-82b021d468b4
 21 20e479cc-4722-5889-b098-fabcaed76546
 22 990b652e-372b-09fa-91d1-14cb6f0ebc53
 23 9caedb13-4b53-873c-a575-87025ac6b6b2
 24 4560bc52-7efe-3752-a6d3-17977e27dcaf
 25 5234b79a-fd24-2523-ad23-50f0f8212d97
 26 a3314133-0df5-52f4-82f4-27385dd421f4
 27 3605acc5-e557-5c90-8d61-6183f4e35ce3
 28 35e6b7a3-3b6c-0c0a-88ec-f682b0fdbe31
 29 6081e181-2729-870e-8300-cd2d160a54c4
 30 b512d223-3fa4-866a-a29a-560f1fb17cdf
 31 27d590c6-1ea5-39d5-bbf8-232fc29b1d5b
 32 4bf0876d-b8b7-2634-b1e2-f13efd9afe16
 33 4678a832-76e7-21f2-8c7c-d6aa55b86516
 34 0b1454be-3f35-7a07-bed5-d19c69047e81
 35 a7d7ecca-752d-72a8-89df-aac26c3f3a38
 36 0dfff4f7-11e7-24da-b1f8-0b4485a26da1
 37 6af77729-f119-1f38-9e5a-8e97a4c0a016
 38 4b6a99c4-6f8d-1c63-a773-410f62be43e3
 39 ca572c95-3668-8a4c-aa82-a3fb04478a99

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 016727317157815045005083255088322772118. Exactly this sequence comes out of new Random(751).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 74 of Run 39 (seed 1,106,402,812): new Random(1106402812), Next(8,64) per post. The RNG predicts N = 39; the post has N = 39 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-11-20 22:02–00:02).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results