A858DE45F56D9BC9 archive

201309040059 1lo2kn

explained decrypted filler

3DES(name+title) ECB, 32 GUIDs, seed 401

Metadata

Post ID
1lo2kn
Title
201309040059 → 2013-09-04 00:59 on A858's clock
Posted (UTC)
2013-09-03 20:59:55
Timezone
UTC+4 · title 00:59 against posted 20:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309040059) = 0abaca8a16082f6449f92c0f10c0da7e (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
32
Filler GUID seed
new Random(401).Next(9) ✓ verified
Run
Run 52 (seed 1,430,705,843) (seed)
Draw
32 · predicted N = 32 ✓
Machine boot
2013-08-14 07:34–10:34 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309040059 (name+title). Key = MD5(password) = 0abaca8a16082f6449f92c0f10c0da7e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c6956226-5498-1c78-825c-2947e4b43493
  2 700b708a-104b-4274-ba9e-9ff7d3708350
  3 d923930c-675d-08da-a960-acf602f63d6f
  4 6470330c-e1f4-1542-98a0-9ea00c382489
  5 add9ffd0-2fdd-2799-8f66-9d2f13636fd5
  6 50fce386-b9af-83c5-81b0-e063a5b2267c
  7 a86d9f90-3dfd-5243-84d3-a4cbc1d482a4
  8 71b61f90-0eb6-5e07-b958-d95afbba4d1b
  9 19e1fa71-021e-5628-a2e0-a2ff5f15c331
 10 8f351b54-5ee4-1fce-9d5d-fe8e1c231319
 11 906ae693-6fd6-6f6f-b813-a99720bbb67a
 12 c2138de0-2537-48f8-95ba-12d531a0d25c
 13 1a1b8650-ae3b-2ad3-97e9-d43d69254426
 14 faf18a15-b56b-0a34-89da-205b5fdc029c
 15 4818a104-75f7-6c5a-8327-a6748329a2ed
 16 0d7714f3-5922-468b-9688-4be32bdc64b7
 17 9dc4324a-3e09-3b76-966c-4f323260841f
 18 5732e147-4998-5499-b3fc-3f1421b46d68
 19 570e597f-ef96-451b-b9f6-aacce0523b10
 20 79fc756f-1f5e-5704-9117-d8616b7781e6
 21 41b58d65-e016-0b2b-8868-ee406d7aa929
 22 24dc6e81-8e42-25c5-907f-82ce3f7d5559
 23 d2e791be-66fa-60d5-8ab6-359053cab287
 24 e198861e-647a-13b0-a723-4bb5983b6ae3
 25 a4742ef9-9078-0dbe-81bb-5adb54983bbd
 26 8e3cf288-7698-337d-a9e8-641503a7c4b6
 27 7b2838b2-0580-6f21-9067-a5d99e75b4b0
 28 4813d44d-0306-17ae-a3f7-0af606579339
 29 efdeda75-573e-24de-9026-bfa7cf356eff
 30 e363ab9d-ba3e-0ecd-9d43-e95c47dbb4ff
 31 1032a975-f86d-20c3-9da9-e8df44adf8d5
 32 5df3a66a-5749-0137-b3ac-eefb54067b83

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 14012855516420643545026103612020. Exactly this sequence comes out of new Random(401).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 32 of Run 52 (seed 1,430,705,843): new Random(1430705843), 4·Next(1,12) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-14 07:34–10:34).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results