A858DE45F56D9BC9 archive

201303030720 19ko5w

explained decrypted filler

3DES(name+title) ECB, 32 GUIDs, seed 432

Metadata

Post ID
19ko5w
Title
201303030720 → 2013-03-03 07:20 on A858's clock
Posted (UTC)
2013-03-03 12:20:52
Timezone
UTC−5 · title 07:20 against posted 12:20 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303030720) = e8f53782e0c3ff201116d5ba9c2c5776 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
32
Filler GUID seed
new Random(432).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
146 · predicted N = 32 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303030720 (name+title). Key = MD5(password) = e8f53782e0c3ff201116d5ba9c2c5776, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 302b874b-bd1b-3245-bfb5-4c972798f7ee
  2 d0ea01ba-f332-5ddd-b40b-88498da78b5b
  3 25ba5387-497d-6329-905d-b823831ed02e
  4 b0b72178-d12c-6054-b7aa-5294c6a20646
  5 64414f9c-ccf8-2bc9-9ad6-b165ae9ec5a6
  6 d4933b9f-c01b-0c03-9998-91c6d1d201b4
  7 e1529ad1-bb4f-4c00-8b61-7b78d09d919f
  8 c9d42610-e8c1-1486-88b2-e7e2bb6f2ff0
  9 509d67ab-17e1-3b6e-8c5d-fad75fe3dc41
 10 52ceb9f8-ae5d-5157-b16d-1c99295c459f
 11 bee9d1f0-753c-5f4d-92d2-503cc500aec8
 12 c358f220-c51e-6d12-935d-348aac2d5d01
 13 e8eb7d75-a916-5b53-b283-6ea5ca8a8108
 14 9979f76f-978e-15a6-93b6-ee94872c42df
 15 56791681-2965-319b-b410-bb80eec1c934
 16 d43fdadb-431e-74be-a259-b349a5d1e60a
 17 f92470e5-6314-4d1a-bf0f-be9f1d3185eb
 18 63f590c7-9303-78e9-9600-ac12074c0b35
 19 2857030f-70a2-36a4-b58c-dcbfafe26593
 20 49ed5248-463e-5ba8-863a-8ae7dfc039d2
 21 a0b45d5d-ec9d-1f25-8530-8a4fb14c1613
 22 aaa615f2-8c2f-7695-93fe-03f0723afc1f
 23 662e0bf7-ce40-03dc-a798-6ccb2c18904d
 24 6f7a0e34-b5a5-822f-a571-ed61ac7c0805
 25 14a57551-61a1-0c4e-81fd-36cd073e5b11
 26 b74df488-d630-342f-a5ae-540e5933372a
 27 fa0760bb-f767-3141-bf0b-03c327a512df
 28 bd423d8d-ce8f-3ac6-8fae-b4e3aed6401b
 29 818a216e-9ff2-7e66-a456-d109a5f1a2f5
 30 eeacac35-9071-8f04-ac3a-a56c5eaf4e42
 31 01a0430c-63df-6518-b076-179ce8cc5028
 32 bae850f5-f9d9-220b-9786-361e49894b77

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 35662041355651374735170803337862. Exactly this sequence comes out of new Random(432).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 146 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results