A858DE45F56D9BC9 archive

201309051259 1lrvg1

explained decrypted filler

3DES(name+title) ECB, 32 GUIDs, seed 454

Metadata

Post ID
1lrvg1
Title
201309051259 → 2013-09-05 12:59 on A858's clock
Posted (UTC)
2013-09-05 08:59:54
Timezone
UTC+4 · title 12:59 against posted 08:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309051259) = 666425f8eada4fd2e3b87b202daf728b (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
32
Filler GUID seed
new Random(454).Next(9) ✓ verified
Run
Run 52 (seed 1,430,705,843) (seed)
Draw
44 · predicted N = 32 ✓
Machine boot
2013-08-14 07:34–10:34 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309051259 (name+title). Key = MD5(password) = 666425f8eada4fd2e3b87b202daf728b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0d7a9ebb-dcd1-8ab4-b29b-ecdc20edacf4
  2 a503beb9-5f20-0631-9953-ed5e755da2f7
  3 84ac1bcf-85b9-0a18-b94e-08c4a347333a
  4 c460d1eb-ef41-47d8-b43c-9e14c6ac294e
  5 6554d631-01ef-1634-9768-c62f9020f9bc
  6 1223f77c-0237-2716-adeb-3c841cc91ea3
  7 91026826-0429-26cf-91e6-bab513b19942
  8 577d395a-9fff-1f63-b221-e0d6bbb8b701
  9 9316d5d4-e7ac-14a4-a547-81c9325ac9f4
 10 a30dd88e-7b65-646e-919c-83be4c42fa3b
 11 12cf8234-2c01-61bf-b02d-ea74e41a551d
 12 8f6bf97d-2164-89f4-b94b-c0955563eb3d
 13 e5ffc3bb-7b8d-6f2c-9aa0-4a43961512d7
 14 247a643b-5eed-5df2-9a65-130003761b30
 15 ab75eedd-292a-6a86-8d03-0aea4bab5c60
 16 4db39a31-335c-5c28-a7ad-28ce8ff99441
 17 8b68aa30-f964-6678-ba6b-31d71126fc81
 18 7364fc04-e920-4fc1-ab11-57a2b7894c21
 19 87e6b167-1075-880c-a8c1-8067f082da0d
 20 9ca7c809-4f99-01ab-a3c7-c30337f5afdc
 21 7a62d4c6-7fd1-1f03-8cb5-5678ee54f155
 22 fb677e8c-1ff1-2f82-bbd4-4a2064ae2f66
 23 3c432154-2ee8-6baf-a724-efe2b3209f90
 24 e822a115-50bf-5aaf-b029-03f0c4a6ae01
 25 3a8c761c-0c7b-18c3-bafc-581de998f1bb
 26 036e31bf-efd1-42fb-b2f2-6d76d652b296
 27 3163b3f4-8974-2260-a04d-41d713c0fcfe
 28 9837395a-cf76-84ef-a81e-868bad52aa62
 29 d12332a4-986a-8979-a7d5-f074b2a6e5dd
 30 c082a558-c40c-6281-b7ee-56b655eeb16d
 31 276d4a11-16b6-7ca6-ad1d-dadd0ee2de23
 32 b1cf681b-c763-0d2d-a147-462024919597

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 80041221166865656480126514288670. Exactly this sequence comes out of new Random(454).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 44 of Run 52 (seed 1,430,705,843): new Random(1430705843), 4·Next(1,12) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-14 07:34–10:34).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results