A858DE45F56D9BC9 archive

201207271407 x9mt0

explained decrypted filler

3DES(name+name) ECB, 40 GUIDs, seed 813

Metadata

Post ID
x9mt0
Title
201207271407 → 2012-07-27 14:07 on A858's clock
Posted (UTC)
2012-07-27 21:04:54
Timezone
UTC−7 · title 14:07 against posted 21:04 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
40
Filler GUID seed
new Random(813).Next(9) ✓ verified
Run
Run 18 (seed 6,051,781) (seed)
Draw
7 · predicted N = 40 ✓
Machine boot
2012-07-27 19:15–19:16 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 53cd9b8f-ba5d-4b06-95bf-b91e0dda8ba1
  2 ec044988-05da-3104-b020-488ca596282e
  3 34e85044-b6e0-0f60-aff4-fbf59d837056
  4 843a9bb9-54a7-07a0-9e72-4bc6aed52439
  5 c1e07ce4-6d83-2b6a-8fb8-70f3d3268f00
  6 dccc6e40-b510-0c2d-a9b2-3c13e218c804
  7 5caa45a8-ddaf-1316-a628-0f4d4c907f9b
  8 6704023e-7a93-273e-970c-854375e335d0
  9 07f67517-2d43-505d-b770-b62ed017a09c
 10 d5feecfc-2bfe-0608-a119-1b8e049132d9
 11 895e2645-f066-23b5-81ef-59f932b56a38
 12 2f7f6e45-5d42-1739-bb5e-caccbdec8547
 13 5968bc82-80a2-4a7a-861a-ec2350913716
 14 88bd3d7a-0699-3b01-b7cd-60f7e4f53353
 15 48e23fe6-40d0-046c-bbe3-e341dcd1fc1e
 16 d805a9d0-7e6e-6487-a0d3-c5c151a7a935
 17 ab43b8d8-0870-5799-af8c-84a6e4112f8d
 18 77470883-f9f3-0f13-94df-0c4752283d10
 19 69e36fbb-28a5-68ec-b2fe-2487ce049ac6
 20 f07ff957-7c21-1e69-a8ad-e7a9f99cdbfb
 21 39e9b75c-1f01-759e-bc71-ee9bb5baa783
 22 0d0338b1-534d-2897-9b38-0b5c2e3fc546
 23 516dcae5-445f-333e-8b44-5136e8eff37f
 24 73928ba1-507a-05fb-8ab7-40bf75bcc1d8
 25 0e6d19bf-fe25-37e5-aec9-37e3496abbad
 26 e1dc1b27-a205-3c76-a8c1-8686c5bcc0dd
 27 b8506c9c-da21-842b-b612-7a0e7c7d6e6b
 28 bf0c97ae-ded7-34f7-b93f-bbee78e4293a
 29 5108c24b-379d-038d-bca0-26ef2043115b
 30 868c5cc6-7e01-7fe1-be1a-594f74f9588c
 31 bb593ce4-a15f-2c25-8f80-9753709856f8
 32 86c2a7d4-ebd8-5eb9-86eb-ec31623e145f
 33 e4be349f-4949-2a8d-ab52-bba9e93e5ebf
 34 f488bd35-46dc-3c83-b5ef-f842866a1670
 35 20c1a9da-c87f-42d5-ab8d-47b96a3c6b5c
 36 4b31ff99-8eef-820b-aead-4c9ef96f2697
 37 892a6a65-431c-4813-9120-f17239ef34f8
 38 a121b0f0-b813-3c83-8b96-0922fb39259f
 39 62823c77-740d-58cf-ae95-f4fda0e8a95a
 40 f401fd4f-f91b-5ea7-be76-59814af8a033

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4300201250214306506172303383072523484355. Exactly this sequence comes out of new Random(813).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 7 of Run 18 (seed 6,051,781): new Random(6051781), Next(8,64) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:15–19:16).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results