A858DE45F56D9BC9 archive

201206290023 vsb4g

explained decrypted filler

3DES(name) ECB, 30 GUIDs, seed 238

Metadata

Post ID
vsb4g
Title
201206290023 → 2012-06-29 00:23 on A858's clock
Posted (UTC)
2012-06-29 07:22:17
Timezone
UTC−7 · title 00:23 against posted 07:22 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,936 hex characters · 968 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
30
Filler GUID seed
new Random(238).Next(9) ✓ verified
Run
Run 9 (seed 449,725,219) (seed)
Draw
4 · predicted N = 30 ✓
Machine boot
F 2012-05-15 19:12–19:12 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,936 hex characters = 968 bytes = 121 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 30 GUIDs as hex (shown below).

Decrypted: GUID list

  1 7c3e89d8-f729-054f-b399-ea2894191d73
  2 e666132c-b5a3-5e92-9a46-df140c70b75d
  3 10932452-7765-10bc-b51a-ee2e858633e1
  4 3175b343-d7f9-37f7-9934-24507f9848c0
  5 668638ff-df55-5c29-af19-897dfdda021e
  6 37f2a227-70db-4687-bec8-ce2e4d98934d
  7 e98d3752-26af-458a-835d-257d29c2fac2
  8 d0bcac4a-49ae-76c2-9aa6-296f5c40959c
  9 e544f8cb-f237-3e3b-9ed2-5f035ddfcac0
 10 77ac6a31-1bf2-0171-910a-8b9ad1ea30fb
 11 836e5af0-cf06-5aa1-bd3c-a57831dd6074
 12 b72fabe1-fab3-2e49-b51a-067fc808921d
 13 914726a9-2d7b-2ece-a0cc-ea129f1320ab
 14 2b3f6bac-9d7f-285c-b971-ff320d18e783
 15 1132dec5-86d0-5f88-a473-5dd48da00de0
 16 f03a9715-2d03-5c06-b457-453d1691c56f
 17 240cbc49-bf96-839c-b526-b7c225f29f02
 18 c0530eea-94c6-4f2b-a0b7-c9350aabaf0d
 19 7e711a72-d8c3-1dc3-85f9-9e1f8a9d3b67
 20 db9ed7ca-71df-4625-8472-a974e80ba365
 21 37393f18-cfa7-3cb0-b669-79b3b26d3711
 22 39eb203b-95ff-2786-8d43-ae1190245f32
 23 7942e256-671e-1b31-a389-0d933ec519e3
 24 7cdcdd25-20fa-1768-90ef-d2d9f55c1690
 25 772abc4f-b0ff-0987-83e4-cfdde03acd32
 26 64bd9f15-6e1c-5458-ae21-c11d80cbfe19
 27 5d4fc853-896e-5a40-a28f-24bddce00173
 28 68d4794e-18a8-1350-9580-f4cb6198c585
 29 3c0d0d0d-fe96-2a8a-9dd8-d3860dc0637b
 30 1d2c8c4d-1f68-6e26-89ff-d599fed3e388

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 051354473052225584143211055126. Exactly this sequence comes out of new Random(238).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 4 of Run 9 (seed 449,725,219): new Random(449725219), Next(8,64) per post. The RNG predicts N = 30; the post has N = 30 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 19:12–19:12).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results