A858DE45F56D9BC9 archive

201207211304 wwrod

explained decrypted filler

3DES(name+name) ECB, 39 GUIDs, seed 806

Metadata

Post ID
wwrod
Title
201207211304 → 2012-07-21 13:04 on A858's clock
Posted (UTC)
2012-07-21 04:01:58
Timezone
UTC+9 · title 13:04 against posted 04:01 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,512 hex characters · 1,256 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
39
Filler GUID seed
new Random(806).Next(9) ✓ verified
Run
Run 16 (seed 39,036,328) (seed)
Draw
31 · predicted N = 39 ✓
Machine boot
2012-07-11 17:05–17:10 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,512 hex characters = 1,256 bytes = 157 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 39 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9bfd9054-df62-767f-a9ad-4e070630aa03
  2 49d4e044-0493-2609-9098-5939570d2d46
  3 90780313-dcdd-1e35-9c01-8fb4f9e0e697
  4 f01d8b1a-f637-5161-912f-631ecef2ea0d
  5 166c2dee-2e8d-075a-9b94-e5e498ab09a0
  6 96428349-1800-8d19-82e4-4eb61abc6041
  7 6ea92639-85d3-0c8f-861a-4c8931db9a6f
  8 ca650a3d-5291-737a-91a3-47dcdc7a8407
  9 09fa80d4-1233-624d-8d5a-2d0d33cef2b3
 10 5b03f3b1-51ad-4744-8229-0dbad53094d7
 11 8a97e080-c7ae-0657-b222-d774946c1120
 12 426871e5-c47c-69c5-8566-6d3231b81880
 13 af69659e-834e-6afb-8aac-91237f18e73b
 14 6747ecbb-b315-73ef-a2dd-43a3b20f3b54
 15 037abdce-7c7c-134b-9dae-346a9b27d745
 16 21925830-0209-3fc0-8aeb-af4d669eb9da
 17 1a89f2e0-05d2-6e2e-8d0f-d655e7c03e80
 18 c4b1d606-1ece-66d2-adcc-03555d09da1c
 19 9028ae6e-9b48-41c9-9d52-2207e63c697a
 20 278a70be-5097-308e-96bd-ef4c1a08a310
 21 67585222-8793-8b88-84bb-1e3e9790b2f8
 22 8e9636be-0dd9-56cb-bca1-28d00c76256b
 23 e232b268-6841-1d03-9689-527249954f57
 24 220e052d-42fd-5a50-a5f9-da175833026c
 25 075fe2af-ae01-6d0b-beb3-5deb68977d29
 26 9272ca23-fc06-80a8-8912-f4e2c580f8b6
 27 13a19a6e-e098-8f57-898d-4d04e1c4e8e5
 28 d1a12b2d-d839-0cfa-8bb8-3fcf5e75c883
 29 e34116fc-8d17-1bc7-a49b-5e1c3f581f78
 30 1f3f1d05-2ee8-1d33-8838-dade6136d273
 31 c80fe09d-fd19-6f58-b9d3-53092a49e9e2
 32 881d62ae-8eea-6451-99b5-fb05b8260739
 33 5138785e-0482-3db0-908c-13f12f6085ef
 34 6a555148-74b2-18ec-b986-3223d609d781
 35 7dc0319f-8add-0101-808f-c24a17af0dc1
 36 9ba4dbd8-f718-69b1-be70-f970f1ee78a6
 37 67707cd4-7b6c-6109-aa38-667c00b991ab
 38 b77eb425-5f90-6fda-9fb5-4b182204f9d0
 39 095596e6-3d5a-31d1-9c6d-722632e43a37

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 721508076406671366438515688011663106663. Exactly this sequence comes out of new Random(806).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 31 of Run 16 (seed 39,036,328): new Random(39036328), Next(8,64) per post. The RNG predicts N = 39; the post has N = 39 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-11 17:05–17:10).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results