A858DE45F56D9BC9 archive

201206290024 vsb52

explained decrypted filler

3DES(name) ECB, 24 GUIDs, seed 827

Metadata

Post ID
vsb52
Title
201206290024 → 2012-06-29 00:24 on A858's clock
Posted (UTC)
2012-06-29 07:22:48
Timezone
UTC−7 · title 00:24 against posted 07:22 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,552 hex characters · 776 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
24
Filler GUID seed
new Random(827).Next(9) ✓ verified
Run
Run 9 (seed 449,725,219) (seed)
Draw
11 · predicted N = 24 ✓
Machine boot
F 2012-05-15 19:12–19:12 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,552 hex characters = 776 bytes = 97 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 24 GUIDs as hex (shown below).

Decrypted: GUID list

  1 292c75e9-82c4-67f5-93ce-6e34bff5e05b
  2 82ed64e2-87e5-47e7-b040-01d8a9b0ba0f
  3 77939fa1-813d-7f29-a82d-953887f23b0d
  4 ce36f4fe-9f1c-0e9b-b389-3c64a2d9d2b1
  5 8b7b7577-5c3c-5db6-8d94-0d322dfaf8e8
  6 e02958d3-ab5f-2bd0-836b-84011ace6974
  7 81c4577d-9b07-4833-a75b-9df2ec85d38c
  8 71304e57-ea96-3a2e-b47d-48a688a778b0
  9 ad8c276e-490c-204b-8ceb-d255a1c8fac0
 10 e1a2cf28-eb87-2d49-92e0-646ee43f406f
 11 ab39af76-3601-5599-8b07-74958a7a968e
 12 984e608f-6d09-1cd6-9806-7692cebf7855
 13 689eac34-2b62-161e-b08a-23346f4052e4
 14 63d9fa1a-3288-6721-90ba-3283e73bf23d
 15 f2c60876-f8f0-786c-a1a3-bdb49a4e8c3b
 16 c7d7d2c7-f02a-40bb-b9f5-52cea84d86a9
 17 9184ef06-7948-4878-bbc7-41e8402329de
 18 a064ff0b-5055-60f8-9397-578406083f22
 19 a15e4856-cb1b-0f4c-b206-fabf72e53ab0
 20 05f97e0b-7bcd-496b-9dd8-0b1577bb8284
 21 62f36b03-0dbb-6013-ba44-d0f7c6b273e2
 22 8d67cb2f-a813-6f5a-88e3-7ede69b8f065
 23 fed746b4-db5c-6280-86a2-ad387c93c8ee
 24 6653e224-2a52-8d0e-b188-15bb6fce9ae8

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 647052432251167446046668. Exactly this sequence comes out of new Random(827).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 11 of Run 9 (seed 449,725,219): new Random(449725219), Next(8,64) per post. The RNG predicts N = 24; the post has N = 24 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 19:12–19:12).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results