A858DE45F56D9BC9 archive

201206271313 vpawr

explained decrypted filler

3DES(name) ECB, 32 GUIDs, seed 442

Metadata

Post ID
vpawr
Title
201206271313 → 2012-06-27 13:13 on A858's clock
Posted (UTC)
2012-06-27 20:11:21
Timezone
UTC−7 · title 13:13 against posted 20:11 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
32
Filler GUID seed
new Random(442).Next(9) ✓ verified
Run
vpao3 (short)
Draw
1 (assumed: numbered from the first post)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: short

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 6ff1d6f6-1bb3-5829-bb08-ecad24c96c30
  2 92c23a85-80f6-4edb-a87f-5fdf6b953e07
  3 b620deb2-fe2d-6798-aaea-ae00da1e9a9b
  4 d8fe1018-142b-85c4-9bcd-0c25a7da53c5
  5 13e770a8-67ea-65b9-8ce5-8b22faa37a8a
  6 d282ddf9-480d-75f2-91ed-ca6a6ad3c50d
  7 161cf29c-7fc5-8831-9a56-bfd04f587a07
  8 76a63744-4eb9-1279-8316-a68593802284
  9 dd2c3647-f9e5-5f1a-bb5e-a365549d53f6
 10 a17b516e-e5b0-2382-8f16-8840e6256578
 11 0c03a185-a369-8918-b6e4-65a130698100
 12 df518d91-5f89-4914-b884-b2559d1a9629
 13 305c9452-b051-4e98-a7dd-b1a2377a7c92
 14 2523ed4b-1b81-376f-afde-e1936e36f3e4
 15 fc017eb7-00bb-32b0-a513-f5332da0ef88
 16 591e0234-9f15-0c0a-9b83-04868c605e4c
 17 9aaf5fa9-3983-5579-8cbd-e433b66106fa
 18 de9652c8-7625-0264-81d2-6b3c6ea1e1a3
 19 b76451c3-3701-5a97-a19b-a9fbbd15f5c2
 20 726a5d91-29d9-4ef6-b936-f230aa0c54ff
 21 c3b0709e-51e2-4a7c-a35c-2973f35ae2f9
 22 f4faca0c-b507-28a1-aa1f-d29f8b489405
 23 922105d1-3523-6b45-9520-f5a041820d1e
 24 cb24d505-cd95-3c72-8d7a-8764d6879b07
 25 706a7b79-2996-0ef8-9ab7-84420a950218
 26 5dc9cd23-4e6b-7c8b-a665-644bb7477792
 27 7e23c6e3-1abd-82b4-bf2c-03dd31bb986c
 28 9c1bf89f-5924-4c8e-a6c1-178df4c43628
 29 d7a6a157-a90c-574b-bc06-b71f5d32499b
 30 df4b98c3-8b82-05fa-9706-2b086e51b36d
 31 8ca91968-5b24-3097-93f3-ec53c21594b7
 32 fc6b1b7f-9c80-7d67-aae1-c9d3e859c4a5

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 54686781528443305054426307845037. Exactly this sequence comes out of new Random(442).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. Grouped in vpao3: 7 posts (40 bits) with no seed under any tested model: not Next(8,64) anywhere in 2^31, not run 8 with a new range, no fresh start on either June boot, N not from the GUID-list seed
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results