A858DE45F56D9BC9 archive

201207211309 wwrwt

explained decrypted filler

3DES(name+name) ECB, 27 GUIDs, seed 743

Metadata

Post ID
wwrwt
Title
201207211309 → 2012-07-21 13:09 on A858's clock
Posted (UTC)
2012-07-21 04:06:59
Timezone
UTC+9 · title 13:09 against posted 04:06 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,744 hex characters · 872 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
27
Filler GUID seed
new Random(743).Next(9) ✓ verified
Run
Run 16 (seed 39,036,328) (seed)
Draw
32 · predicted N = 27 ✓
Machine boot
2012-07-11 17:05–17:10 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,744 hex characters = 872 bytes = 109 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 27 GUIDs as hex (shown below).

Decrypted: GUID list

  1 473c664e-2800-7a62-9755-4da010fd3c1c
  2 6aead245-ac35-7aca-b562-d4eef8e7b8b9
  3 4ea840bf-3260-1ee2-81a1-6252c7915877
  4 e1796260-5352-12a0-a0d9-9a004d088239
  5 182b30a5-9314-5fe3-8c18-1e1e38c66281
  6 ae8b42b6-3fff-71c3-8e86-56a165ca1149
  7 283dbda2-9d03-7b7f-ba1b-fbb25d79b090
  8 f6d4350b-938c-1077-ab97-a7fec12dc134
  9 e6112c3d-1fdd-8300-9ea1-33d83afdfb1d
 10 2314de6c-57ba-2342-b688-c3ba0ba27374
 11 339c23c5-bd5d-679a-ab8b-3c5ec4138213
 12 b2bce291-f0ca-4abb-a655-6c7c60118b0d
 13 d98de044-d873-390b-a1ae-cf648b8ec917
 14 ea65d45e-c1e6-091b-9cb1-a00f9545d1b2
 15 9decf445-c234-0cc4-b362-fad32efed801
 16 155a0cf4-8f43-0324-a2d0-0dd50e3428ed
 17 60dc26ef-aa88-186e-8729-4045ec0177c5
 18 e17c9dda-5fb3-5049-bb62-e7dd2b719720
 19 1fe36ab3-8890-766b-8c29-cf1c1ed16855
 20 2cd2d012-8bee-0d2e-a54b-bf729a957c4b
 21 53989e73-47a4-4a27-a071-1d40c00fa144
 22 462bce9e-7964-1917-b85c-ee3b2718cba8
 23 bc440d1e-833b-5a38-b9c0-d3c10224fccd
 24 af170ae9-03c6-569d-bf64-7e453470ad25
 25 5b0eb079-9c50-47fc-8bb0-cb62719f8a09
 26 7fc4e1e3-9d33-3de0-af79-98294e69a684
 27 6effdf55-86f8-616f-a630-8f526a1f51f2

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 771157718264300015704155436. Exactly this sequence comes out of new Random(743).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 32 of Run 16 (seed 39,036,328): new Random(39036328), Next(8,64) per post. The RNG predicts N = 27; the post has N = 27 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-11 17:05–17:10).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results