A858DE45F56D9BC9 archive

201207070606 w5byk

explained decrypted filler

3DES(name) ECB, 25 GUIDs, seed 954

Metadata

Post ID
w5byk
Title
201207070606 → 2012-07-07 06:06 on A858's clock
Posted (UTC)
2012-07-06 21:04:10
Timezone
UTC+9 · title 06:06 against posted 21:04 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,616 hex characters · 808 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
25
Filler GUID seed
new Random(954).Next(9) ✓ verified
Run
Run 11 (seed 37,057,156) (seed)
Draw
26 · predicted N = 25 ✓
Machine boot
2012-07-05 09:16–10:46 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,616 hex characters = 808 bytes = 101 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 25 GUIDs as hex (shown below).

Decrypted: GUID list

  1 733c9fd1-6866-10d0-bdd7-db0a28119b4a
  2 8e5407d9-ed19-6d2f-aa27-15dab6d8a55e
  3 fe7b3735-d7e9-565b-9f67-1f65a6a45054
  4 59e2c4aa-4597-1cb2-bd8d-90216c21144f
  5 27ac3c2d-3f2a-8b5a-a42f-fdf3780550bf
  6 512c45e9-fbd2-291f-8912-27f9bc816e9d
  7 9ae2997e-3b07-3559-bf03-369349e01dc3
  8 aac4c70e-115b-08fa-b292-806820b90d72
  9 6182db27-b59b-0656-b98f-ac9e322faec1
 10 5054b538-7295-0cea-8a20-66d869b739b8
 11 b9399114-08d6-1041-bf36-696995955474
 12 636b42c5-ce38-2329-ba8d-e279de314392
 13 e2fbef38-b270-48dc-b01e-d0a5f0906f4a
 14 f8cded0c-1599-7472-bae7-0ed9e85ac93e
 15 36f72e24-f8bf-665e-8390-cffd4d81709f
 16 35209588-0190-79e7-b080-486a2eedf67b
 17 09f51019-28bb-7ca1-8337-4a422bbea3c3
 18 22e0b087-9d6f-4e54-9e07-dc4f595c30ab
 19 df31014b-bab3-457b-8b55-9d48c7438293
 20 270fec29-0333-69db-86fd-a921330c877f
 21 5244d555-47b9-5b28-8493-3400f82cdf2b
 22 7da842da-9dc9-8849-9d08-cadd83d2bdb8
 23 888e9eac-80a4-2c58-adb4-78bd85a0ab35
 24 a1efd31e-30b4-2ee2-960c-fd1f2f4993a3
 25 800b1aad-72c8-1032-9636-5b4935326742

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1651823000124767744658221. Exactly this sequence comes out of new Random(954).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 26 of Run 11 (seed 37,057,156): new Random(37057156), Next(8,64) per post. The RNG predicts N = 25; the post has N = 25 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-05 09:16–10:46).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results