A858DE45F56D9BC9 archive

201206271413 vpeod

explained decrypted filler

3DES(name) ECB, 42 GUIDs, seed 349

Metadata

Post ID
vpeod
Title
201206271413 → 2012-06-27 14:13 on A858's clock
Posted (UTC)
2012-06-27 21:11:30
Timezone
UTC−7 · title 14:13 against posted 21:11 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,704 hex characters · 1,352 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
42
Filler GUID seed
new Random(349).Next(9) ✓ verified
Run
vpao3 (short)
Draw
2 (assumed: numbered from the first post)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: short

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,704 hex characters = 1,352 bytes = 169 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 42 GUIDs as hex (shown below).

Decrypted: GUID list

  1 51a4d837-7de3-07d8-82b0-eef8c15dc4b8
  2 41d60a04-7361-1971-aacc-f2316049f0bc
  3 188b83f2-a8c4-6c29-9983-cfa37151fc6b
  4 c6c15c8a-686b-0486-8b64-5a051bff42a4
  5 2ddc7f6f-26c7-6f5b-856a-2970161eb9c4
  6 3fe9b8cd-734d-47f9-801f-7254bc46a08a
  7 b6934ae9-d2ea-2eac-aa18-cb72bdd4ec6e
  8 fe071fc9-b129-4c0a-8974-d91ad0d65395
  9 f1d34acf-daf5-1d68-9893-5ed643b0d7e2
 10 61b81967-d097-8b9b-aab1-d3c6e238a41d
 11 418acbf5-d577-3974-a4d7-949003f8742d
 12 6448bed3-1177-825e-a667-07b3f2f89880
 13 696f3797-c6df-4534-bd30-7ef2b41b7169
 14 bbb551b2-ba44-06da-90de-580755ea532e
 15 5533d8e1-6023-2c3a-9892-dbf861ef2db6
 16 4384de44-a799-88ef-aadc-346dacf9ace8
 17 2c392c40-c1c8-504b-acac-9605936eccc3
 18 6821d4d2-98bb-3176-b595-3acfafb58263
 19 5f8f1ec2-8c01-15e5-85b9-0742f19da68c
 20 b07a5b81-cf12-49ac-bbbd-7b5a5d4c7496
 21 3c4f4449-44c9-14fe-8132-26e882e5c8ca
 22 c98ea5b7-3fbb-4ec6-9a5d-874c4d5ec685
 23 da8f4cb5-21bf-8293-b70a-bf4a86d6b8e9
 24 d3d2de17-88d2-8caa-9523-44cd16a198eb
 25 e834ff44-b8ad-8426-952d-41a5d831cebb
 26 929e0476-ea55-8c41-af1b-cd7306f6d6b6
 27 1ca8702a-df43-8803-9b6d-afc5774967ce
 28 26ba7747-a3f1-88f9-9658-fde41ee5717c
 29 845c5279-934a-8858-ab7f-4c5e9a033ae0
 30 0c7e11e5-496e-1c00-9431-c46d00862d4f
 31 41ab74c4-1875-0662-8dea-4d255dddca53
 32 ec2c0af6-b594-37df-b980-bac8c7df699f
 33 d4d53781-b126-59b7-b110-834b56721a4f
 34 317b01f7-03f5-6423-8e51-d09759b516f1
 35 c7f68494-4a09-401a-a73f-78930e81f5b4
 36 57bf832f-ad03-76a3-8c2f-2159d29b0523
 37 1f34edb1-ffef-10bb-b64b-f6886b33c4aa
 38 0693fd5e-b5b2-2ecc-ab35-d88be7443dd7
 39 d7d0bf17-cb32-00d3-b6fc-a0291a37a567
 40 715a0fd6-0d09-117d-ba68-a2a80e1b6326
 41 da741919-797d-3e98-9a43-3252e47bd89f
 42 9bd63eae-6df0-640d-861a-1fd598a7b413

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 016064241838402853141488888881035647120136. Exactly this sequence comes out of new Random(349).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. Grouped in vpao3: 7 posts (40 bits) with no seed under any tested model: not Next(8,64) anywhere in 2^31, not run 8 with a new range, no fresh start on either June boot, N not from the GUID-list seed
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results