A858DE45F56D9BC9 archive

201207070009 w5xpj

explained decrypted filler

3DES(name) ECB, 26 GUIDs, seed 910

Metadata

Post ID
w5xpj
Title
201207070009 → 2012-07-07 00:09 on A858's clock
Posted (UTC)
2012-07-07 04:07:25
Timezone
UTC−4 · title 00:09 against posted 04:07 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,680 hex characters · 840 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
26
Filler GUID seed
new Random(910).Next(9) ✓ verified
Run
Run 13 (seed 19,267,593) (seed)
Draw
7 · predicted N = 26 ✓
Machine boot
2012-07-06 10:46–12:16 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,680 hex characters = 840 bytes = 105 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 26 GUIDs as hex (shown below).

Decrypted: GUID list

  1 7ed75603-894a-1d7c-9fed-304ee31d5b47
  2 0d6ed82f-224b-7f51-a589-214b079448db
  3 c7746b64-fafe-785d-89a3-2d5fd346c8a7
  4 e8f8a7fa-bcf4-761e-ba6b-eb34cac50e5e
  5 e4047de2-7b9f-061e-9ee9-5da5211dc16b
  6 e7a50b26-5834-712c-a2fd-541a5bcf9b0f
  7 5f16d6bc-96d2-54fa-bb29-e9205e148db2
  8 b3d659d2-c965-846c-aa0e-18dfa019fd05
  9 cd6394a5-d4dd-5457-bf67-188ae01a6b54
 10 0a866dbc-4109-7d15-82c1-684462785c84
 11 c52ec076-9b7f-66d8-849f-500df5db12f9
 12 926e654c-37ab-8037-beb2-8d06dd0de8e6
 13 ee061938-8766-18d6-9ebc-bae03714fb8c
 14 f24b28d9-c250-8070-a60c-551fefc37516
 15 296ee7f6-6a2b-8bc9-b934-5a79c0e07fcb
 16 8f64358c-194d-31ba-86f2-b6eb9fc7a053
 17 feb5b047-cf30-30ad-8b75-95c641674751
 18 d7bf6d60-3b03-1f61-bdca-29d55c0e5c18
 19 69dc91ef-bd3c-2a68-99c7-e9c62ed8a536
 20 612dde00-5883-6cb8-baad-d63ab185a9b0
 21 bb135d51-b141-603f-a7d9-0690d57496e9
 22 9c00468e-4603-01fc-a000-d60056b83f8e
 23 fa37ea81-01c8-7607-ad0c-576a37089290
 24 14f1bb2c-b0a8-8714-be87-9c57f4d9af8c
 25 552826ad-2f26-71aa-91f0-f10507a6643f
 26 845056a3-4510-7322-9e4e-975c990fa6f4

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 17770758576818833126607877. Exactly this sequence comes out of new Random(910).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 7 of Run 13 (seed 19,267,593): new Random(19267593), Next(8,64) per post. The RNG predicts N = 26; the post has N = 26 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-06 10:46–12:16).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results