A858DE45F56D9BC9 archive

201206261138 vn4gm

explained decrypted filler

3DES(name) ECB, 22 GUIDs, seed 173

Metadata

Post ID
vn4gm
Title
201206261138 → 2012-06-26 11:38 on A858's clock
Posted (UTC)
2012-06-26 18:37:14
Timezone
UTC−7 · title 11:38 against posted 18:37 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,424 hex characters · 712 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
22
Filler GUID seed
new Random(173).Next(9) ✓ verified
Run
Run 3 (seed 1,063,142,882) (seed)
Draw
32 · predicted N = 22 ✓
Machine boot
2012-06-14 10:25–10:26 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,424 hex characters = 712 bytes = 89 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 22 GUIDs as hex (shown below).

Decrypted: GUID list

  1 cc780f0b-486f-0c3f-9120-b92a12fbc1d5
  2 b599a1d5-9103-5571-be6e-b7d283c8444f
  3 d116eb98-c37f-6cbc-97c9-96afca0bdde1
  4 0c9ceaaa-878f-4192-a777-88480a7a6fc5
  5 0b48882b-177c-283c-8e55-d01203d262ec
  6 3ab4bdd9-208b-66c4-a66c-58a05f15ca36
  7 041c489f-b4c8-3761-ba19-71a46ba6f9fd
  8 bfa0bc4e-8f1e-258b-bd3c-f68202054525
  9 c223cb7b-6cf9-3f21-8158-b16a78ee455f
 10 d67631a3-113c-07e5-a911-d2600845a5c7
 11 fcb9cf3e-b469-6700-9e5e-9d314d7c0f11
 12 1eafd0a2-a259-4ad2-9ca1-d90cf984a703
 13 be3a931c-f319-587d-bea3-fe1f32300926
 14 4e71e79b-4b96-45ad-ad61-afc068895354
 15 de3af2a1-4817-02cc-bb84-2a47f0d5cfcb
 16 23cd251f-85d3-04a8-a59b-311a3c662502
 17 b2877576-0a02-544e-ad4c-de1e89b2980c
 18 fea1ddb3-488d-2191-820f-f369a1b45a19
 19 c39a523f-58c2-3655-9107-09c4e763d6e9
 20 c554ab4a-837e-2d4b-b13a-83990257cb9b
 21 1a41ec99-12af-74ab-976b-380377704469
 22 7079368d-f77e-27ef-b92b-231aea30fb04

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 0564263230645400523272. Exactly this sequence comes out of new Random(173).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 32 of Run 3 (seed 1,063,142,882): new Random(1063142882), Next(8,24) per post. The RNG predicts N = 22; the post has N = 22 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-06-14 10:25–10:26).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results