A858DE45F56D9BC9 archive

201303031820 19lpya

explained decrypted filler

3DES(name+title) ECB, 36 GUIDs, seed 832

Metadata

Post ID
19lpya
Title
201303031820 → 2013-03-03 18:20 on A858's clock
Posted (UTC)
2013-03-03 23:20:52
Timezone
UTC−5 · title 18:20 against posted 23:20 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303031820) = 8019a7d3180588661de2f5427eae0358 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
36
Filler GUID seed
new Random(832).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
156 · predicted N = 36 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303031820 (name+title). Key = MD5(password) = 8019a7d3180588661de2f5427eae0358, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 104c2b91-dc18-3521-a784-49e25f864ad9
  2 18b52ff4-dc63-89e0-b1ec-84d2aa093de5
  3 9dbdb2f8-f3b0-2cea-88bd-26567bd8f96a
  4 7051760f-726f-14c0-863f-9bc0e2280abb
  5 1719b1e4-515b-781f-bebe-83767936d8ff
  6 38e7dab5-54db-5c46-b421-958d4daaf465
  7 9761626a-87cd-6d64-91a3-0621d22a51eb
  8 3d04b24f-91cd-755f-ad7e-3d4597449279
  9 23465e92-d1f4-8258-a5ef-202e0021c782
 10 3ecda780-f2f7-006f-ae8e-00bef3defba1
 11 fbf6ea3e-1bec-2374-bd4e-ed188315f061
 12 7e5e8749-9873-0277-b870-1155c92f9217
 13 741afd1e-ee80-553f-a1f3-a169e8122e8a
 14 b433a0ff-b22b-2838-a04e-37f6ef8b173d
 15 c198af82-558e-3c6e-93b9-ebab26efc03d
 16 29224ecd-e2ce-53c9-997a-3438b7b03087
 17 fc34fd4f-e082-57a5-be52-75ee2c340bcb
 18 09b7912e-1923-74be-8278-2ad660ff336b
 19 1c50f105-85a1-13b9-a4f1-1688aba66bb2
 20 19005291-e765-4515-a875-9b83b4600d80
 21 60e8d016-3ad5-3fa9-9f8e-a40499f851d4
 22 422b4023-28b9-8a8b-a328-34ed6a991b30
 23 ea698ca3-927c-5863-866b-234b65368214
 24 3ba59196-a5fd-6561-ab29-06a5db8e4055
 25 a1e74cfd-460a-267e-870d-cbc4341dd2d7
 26 d88025b8-191d-597f-8a87-ef68467291cf
 27 51c46f9b-9c8f-2ea9-990f-e73c56a24e90
 28 25a8bb10-e3e2-13c2-a35e-ced2cb923c73
 29 7d7f493f-34b2-37e6-9209-485bcbc97619
 30 aaecb3c0-4e1c-1eb3-a18b-35ae2c8e926a
 31 5009ee65-c5bc-3643-abc7-36706a865779
 32 546a893e-1e6e-51e8-80a9-c7e3ad2a4177
 33 4332eef3-0bf8-7479-a8dd-7366fe14846f
 34 d5dd2892-1580-7229-b2d9-fbf215a9a9e3
 35 6079ad72-ce4b-13c8-a338-b269675c81ad
 36 011e7af0-4b1f-7975-9033-c51f43bffd32

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 382175678020523557143856252131357717. Exactly this sequence comes out of new Random(832).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 156 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results