A858DE45F56D9BC9 archive

201207022135 vyev1

explained decrypted filler

3DES(name) ECB, 35 GUIDs, seed 671

Metadata

Post ID
vyev1
Title
201207022135 → 2012-07-02 21:35 on A858's clock
Posted (UTC)
2012-07-03 01:33:40
Timezone
UTC−4 · title 21:35 against posted 01:33 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,256 hex characters · 1,128 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
35
Filler GUID seed
new Random(671).Next(9) ✓ verified
Run
Run 10 (seed 38,548,093) (seed)
Draw
4 · predicted N = 35 ✓
Machine boot
2012-07-02 09:51–10:51 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,256 hex characters = 1,128 bytes = 141 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 35 GUIDs as hex (shown below).

Decrypted: GUID list

  1 508edf22-064a-20a9-a79b-f1b3ac7d49d7
  2 da2a5c75-dd98-66e9-8983-860c193e9376
  3 32640543-d2a3-7451-bef0-59ec3c045aca
  4 3a0b0ed9-88af-7872-9448-6ae02d8682ea
  5 7f1315e1-4ebf-14e8-9866-7c7ef9e33c5f
  6 21bd87d3-da10-88ce-bb7f-569bd07ee397
  7 7bf1382e-8e05-466f-b5a8-f2c16615b955
  8 e6d93f60-c34c-0719-82a8-39616e7e07aa
  9 4d053623-f862-83c6-a072-12efcbdf0160
 10 38d3a54f-a26f-6509-aafa-dfb1267cfdfb
 11 d5b4297e-64fa-5608-bab9-358b2fda2a47
 12 fbe215cc-68a1-2eb4-a705-897b0c981e10
 13 f12493c2-99e7-8468-9ed5-4a4c6a7f6246
 14 8da8ddd9-d867-572c-8a5a-82f30fa3f726
 15 4e816ea8-cca5-5d8e-a79e-7ed69ae2229e
 16 5f48ad42-210d-03aa-96e1-94a6e7a8f43a
 17 9640311f-064d-8e8d-9133-d569926dc42d
 18 4d034550-d183-062a-8102-a5a5a7b21c86
 19 58982945-bf24-7a43-951c-2e950dec3a4c
 20 29a886fa-ddef-1cc5-8d6e-eeebd6324d6a
 21 5c385904-5982-8d4e-b30b-813d1b682bb4
 22 ef06d1cc-bc71-4470-bc7c-186b7a2ee6de
 23 ca8b0a59-9396-31ba-98a2-a6bff7540fa0
 24 92c3d6ec-35e9-3d62-900f-8df5752a2489
 25 34d54ae9-fd61-4114-b3ea-2cc52f365925
 26 221e6583-a56a-0dc3-96e6-5197de411d2b
 27 691d0095-e2fa-7b56-9427-ceb5113df857
 28 361d6192-9da0-4ec4-8173-c7ff80bfc441
 29 cc5d8ae2-e728-7d50-a374-083031a5dce5
 30 30b3e5a3-6102-4928-a398-28437ea85377
 31 29456931-75cb-8800-9c65-d2b7173ea60c
 32 7c5087ec-47ff-1328-b63b-b01936dc90f5
 33 6309767f-bead-1234-91b8-f8642b694bd4
 34 4e51299b-cfa3-7661-9eb1-533bd2c969a6
 35 d82c7ef6-779f-812e-9efc-7d8a5e7c7d0e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 26771840865285508071843340747481178. Exactly this sequence comes out of new Random(671).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 4 of Run 10 (seed 38,548,093): new Random(38548093), Next(8,64) per post. The RNG predicts N = 35; the post has N = 35 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-02 09:51–10:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results