A858DE45F56D9BC9 archive

201207202248 wwnym

explained decrypted filler

3DES(name+name) ECB, 33 GUIDs, seed 612

Metadata

Post ID
wwnym
Title
201207202248 → 2012-07-20 22:48 on A858's clock
Posted (UTC)
2012-07-21 02:45:49
Timezone
UTC−4 · title 22:48 against posted 02:45 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
33
Filler GUID seed
new Random(612).Next(9) ✓ verified
Run
Run 17 (seed 38,757,453) (seed)
Draw
20 · predicted N = 33 ✓
Machine boot
before 2012-07-11 16:41 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ceaac3b3-3c3d-4896-8df1-7c6231589aa5
  2 155a954d-8075-3ca9-a0a0-0be4776ab54e
  3 80c905d9-1ea4-4f30-a1fb-0981bb87f89e
  4 2b8fa135-698d-10d3-991e-89f08a179206
  5 14a263dc-91ae-458a-826e-199ec01ed444
  6 57af085c-4179-3b08-81bb-58e196ed4970
  7 5b2a2213-0cbc-1fd9-9571-5a57811390d5
  8 ee57c016-c605-4610-a742-9968bebec782
  9 0961dff2-c26a-62ed-93e4-f2e1457674f6
 10 667464ac-a83d-8481-a6e4-07e0f065d5a2
 11 bc4b3835-7e24-1236-96bc-2f1355c1f107
 12 3d394275-23f6-295d-9651-9698e98924b2
 13 40ca5e35-36e9-359f-8bed-ffd97e6ac763
 14 c69f35b1-25b8-75ef-ab1b-d660d4868fe0
 15 787efe9e-f585-3ddf-ab73-38aeb2dadcd2
 16 caeb3fa1-5c7f-295f-ad48-43f432f4d736
 17 09daec26-41f3-1f91-b757-04c7abd42277
 18 f0c2c564-c83f-3e63-80fd-bfbbc1b26963
 19 80a99786-14e4-28f3-9ded-555f83a2eead
 20 f9deec1b-6fe5-20be-890d-62bf5f2520ae
 21 74f35e34-5e79-1a36-9770-d1f1f4601711
 22 6d103f2f-ac62-8312-909e-576f5267942b
 23 97654b5d-c169-3df1-9a10-f5951cfa034d
 24 0819d677-8e8f-7722-b8df-f0b9b6cfee6e
 25 e69e6e1f-9686-652f-88af-2850b8bb5007
 26 840b5c6d-11d4-1742-8e8f-43b5bfe2f215
 27 01a09f1d-21d1-0ccf-98c2-e9afccf4b38d
 28 8c216ff9-2d89-74f8-9242-5c3b61fbbb25
 29 8b0d2d7d-3116-5ba8-bd9d-154afd2c6129
 30 0a586e98-d315-8e1a-afd9-88f8f32c0532
 31 8ce68ff8-9340-1541-8722-bc6b0f90f42a
 32 8b09a3b3-8cca-54a9-8c1a-24f7d33a0633
 33 8aa34706-5209-3f4d-ab5c-3cede4192f01

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 434143146812373213221837610758153. Exactly this sequence comes out of new Random(612).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 20 of Run 17 (seed 38,757,453): new Random(38757453), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot before 2012-07-11 16:41).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results