A858DE45F56D9BC9 archive

201207060935 w3rht

explained decrypted filler

3DES(name) ECB, 42 GUIDs, seed 329

Metadata

Post ID
w3rht
Title
201207060935 → 2012-07-06 09:35 on A858's clock
Posted (UTC)
2012-07-06 00:33:52
Timezone
UTC+9 · title 09:35 against posted 00:33 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,704 hex characters · 1,352 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
42
Filler GUID seed
new Random(329).Next(9) ✓ verified
Run
Run 11 (seed 37,057,156) (seed)
Draw
7 · predicted N = 42 ✓
Machine boot
2012-07-05 09:16–10:46 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,704 hex characters = 1,352 bytes = 169 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 42 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b16bd2aa-62de-5d32-8887-e7d308c29ec2
  2 8171d15d-e261-3632-a259-07d79be0aa46
  3 4fdeda5a-086d-6981-9608-8501b4aec350
  4 fe208cd0-002f-7cc7-8449-57468b1a47f9
  5 628864b8-ced7-642d-8c87-3ebde2753e94
  6 1f6a6896-aa77-0205-a027-0a172d8dd318
  7 d32c79b4-da74-24af-9621-336f06a7222c
  8 65c9cbf0-4644-4525-92fb-847dc02fd9fd
  9 e9f6784b-135a-6915-a3e0-e487e4e77c34
 10 c4ff9579-94c8-5edd-a9cd-978a597015ae
 11 ea82c357-50b8-62b4-bb8c-3f49eb2d06a4
 12 1e47f56e-3659-2ed6-a99b-692057642a97
 13 5fc61b78-b871-7913-9fcf-192f0e0a5435
 14 959c8d1e-f785-574f-8927-1f81c1ba2cb7
 15 ec666965-4e43-2f8a-aca9-b2f8dd5f5027
 16 eb6cd844-a2b3-4187-a004-26a400e3331e
 17 4d4ebca3-dd28-1269-b024-7fb904d06b99
 18 547cf112-6e92-8da0-8e82-dc260f5e46d6
 19 9bce1be7-04d6-562f-ba1b-97ddad2f9ce5
 20 2402ccf9-8797-6080-ba0e-0478e5449f91
 21 85410f9f-0ae0-4ba8-a6de-b2f8e5da3d6a
 22 9ce2e021-7b73-58be-b319-057b14656ff7
 23 aaf6327f-dacf-532a-acb9-057530cc4169
 24 711410bf-4cd4-86f6-becc-6775954c239e
 25 395f4759-9023-86d3-a728-316d28fcb73f
 26 9d09a0df-a30a-1b47-a64f-624e0a923668
 27 7fc2dd84-3322-77a0-9bc1-871591e02a47
 28 202e1803-0d9c-4a25-9d09-0a0c5ade25ff
 29 6820df0e-9781-38dc-bc32-d8b1b267b11c
 30 b1171215-7ce0-014f-90ce-5105c6e6a780
 31 8117e639-aa19-5f7f-b94d-9a37ab0ff9b6
 32 bdec994e-b5ee-16cf-a5e5-8aca1d6e75cc
 33 4834af49-f4d4-5dc0-b900-95ec773889fa
 34 dbf9b5bf-9c82-251a-9b40-f3e467bbf9a7
 35 501b4149-acef-44a1-bee9-8fc628b0ddbf
 36 5555b3ef-eb6b-064d-b802-f9ff1ab1a64c
 37 742b8e80-efcd-5858-815a-d2ae1bb0333d
 38 482246bc-0207-5f43-8ad2-73ba26513b71
 39 d057b813-4697-6fea-90a5-2b3c175dfaea
 40 34bd72dd-f803-629c-b6f3-fb5c881af17d
 41 36f35197-c78c-03bc-8e0c-961b108bfe58
 42 43ca4530-de60-18d9-9af0-cf2b3e8c790c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 536760246562752418564558817430515240556601. Exactly this sequence comes out of new Random(329).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 7 of Run 11 (seed 37,057,156): new Random(37057156), Next(8,64) per post. The RNG predicts N = 42; the post has N = 42 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-05 09:16–10:46).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results