A858DE45F56D9BC9 archive

201207202254 wwo97

explained decrypted filler

3DES(name+name) ECB, 28 GUIDs, seed 174

Metadata

Post ID
wwo97
Title
201207202254 → 2012-07-20 22:54 on A858's clock
Posted (UTC)
2012-07-21 02:51:50
Timezone
UTC−4 · title 22:54 against posted 02:51 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
28
Filler GUID seed
new Random(174).Next(9) ✓ verified
Run
Run 17 (seed 38,757,453) (seed)
Draw
21 · predicted N = 28 ✓
Machine boot
before 2012-07-11 16:41 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 edc0586d-5b86-511f-8497-87d39f2f6a95
  2 3f5b7267-15c2-7853-b9c1-42e9739820ee
  3 47a64228-940b-3a80-b767-4fa4d15fd3b6
  4 7451ba6e-2de2-6a96-be00-b0c6873d90a8
  5 ecd02950-3c91-644d-a198-2c37c45e8f8f
  6 ca543928-dd6c-52d4-bb4b-ab29c4cfa4ad
  7 908813a2-9935-7ea7-9b37-f9935b135851
  8 0bd4969e-5a09-6b1b-8eca-5cdee4535821
  9 db12fb35-7b36-4744-8a4e-7bc39c07c11f
 10 ef5ca245-a538-31f3-b287-d5baaf5c6a5e
 11 5b7dbc98-4eba-4676-9f32-ad81a732367c
 12 afb8661b-82a4-27b1-a02a-95663a81aef4
 13 e715af9c-d7ed-2023-b14f-0ef0fd075b0d
 14 80552aee-a294-834d-b949-e027db977f1d
 15 a4b2cf16-a086-69f9-8072-5e478ac1f59b
 16 910bf8e3-02bf-6722-8694-95990b052a96
 17 4dff9a4c-c308-0c9a-9a0e-5790f2464327
 18 ec19c349-e3c6-7f90-8199-bce7f5be5f50
 19 b6df2c00-b553-3846-8058-ba3711be8086
 20 09d00b94-70ed-645a-aa4a-6bd5ab90dd86
 21 037f4a99-d78c-85bd-af5e-6bc4130de9d0
 22 2e72ef4e-99b0-42f5-b80b-4d6e2cb924ea
 23 b08e877b-d454-36db-870d-460376d5f5d0
 24 ac14be98-38e2-7cc3-994d-690d84c6a6eb
 25 da07ce81-ae42-6408-b9e3-fc53d01551a8
 26 f83ee182-0bd2-3f27-a8fa-b19934e57e64
 27 0cc43907-c3f2-4593-a656-778008189619
 28 f8962d3f-dd7a-4ea2-b310-1bf6b8cbf148

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5736657643422866073684376344. Exactly this sequence comes out of new Random(174).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 21 of Run 17 (seed 38,757,453): new Random(38757453), Next(8,64) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot before 2012-07-11 16:41).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results