A858DE45F56D9BC9 archive

201206290024 vsb5a

explained decrypted filler

3DES(name) ECB, 28 GUIDs, seed 40

Metadata

Post ID
vsb5a
Title
201206290024 → 2012-06-29 00:24 on A858's clock
Posted (UTC)
2012-06-29 07:22:56
Timezone
UTC−7 · title 00:24 against posted 07:22 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
28
Filler GUID seed
new Random(40).Next(9) ✓ verified
Run
Run 9 (seed 449,725,219) (seed)
Draw
13 · predicted N = 28 ✓
Machine boot
F 2012-05-15 19:12–19:12 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 01810480-81a8-55ec-aaad-3d82a3805d66
  2 caf2db71-97fd-41b8-aaad-f5cc8c5deabd
  3 7fe3e79e-7386-6b55-a6e5-8dd9e4eb4d10
  4 8d74e275-bd3c-0ed2-a63e-2970e3454f19
  5 536d7b9f-717b-2d36-910d-90fe507a8d14
  6 bc53beec-c117-4dd8-8020-e74474e4353d
  7 8cff37bc-6783-78e5-b345-b98cf327d361
  8 a4550aa6-66f9-46d9-ad62-af01d8d01007
  9 7f210360-f839-8438-9721-8ae998359214
 10 e74deec2-895f-01a6-a8a0-4d524d747e98
 11 da6e63f8-fbc7-653e-bcfe-41e2fdd1a54c
 12 26719ffc-c040-6244-892f-1005e37dd674
 13 75f89e04-b972-17c2-b4cb-850fe863e074
 14 161cd88a-8de2-218f-8108-caa82f8bd6a0
 15 fdfa7f27-083f-8dae-b504-c2017ad5344b
 16 001ddb72-0169-04fb-9563-a387a91a60b6
 17 f1221ebd-eba3-6f58-96cc-1034e097a871
 18 d6dd1869-7ba7-7d17-ab6a-cc3a20158752
 19 21a6f33c-8a44-642b-8cb6-49f12e43bc9f
 20 437134de-e9fa-75d2-bff5-ec2f7b8cca35
 21 e681608e-179b-160c-a23f-75ddac37e732
 22 e1f8e6c4-65f4-5164-8089-ea7fc18fd5ea
 23 a9721046-49d0-68f5-a7aa-bd8d069bd905
 24 4d3e36ea-e0b8-0e3d-9bb5-8de89dc428da
 25 3474464c-ecaa-5d92-b573-2f02632b46b6
 26 f2a76cd8-df58-20a1-9a14-ec1774f4b29f
 27 2b3863fb-df68-2be5-9db1-183c7428faa9
 28 7ee377af-d06f-409d-bfa2-fc76466a80f3

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5460247480661280676715605224. Exactly this sequence comes out of new Random(40).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 13 of Run 9 (seed 449,725,219): new Random(449725219), Next(8,64) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 19:12–19:12).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results