A858DE45F56D9BC9 archive

201207271414 x9n81

explained decrypted filler

3DES(name+name) ECB, 31 GUIDs, seed 969

Metadata

Post ID
x9n81
Title
201207271414 → 2012-07-27 14:14 on A858's clock
Posted (UTC)
2012-07-27 21:12:05
Timezone
UTC−7 · title 14:14 against posted 21:12 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,000 hex characters · 1,000 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
31
Filler GUID seed
new Random(969).Next(9) ✓ verified
Run
Run 18 (seed 6,051,781) (seed)
Draw
14 · predicted N = 31 ✓
Machine boot
2012-07-27 19:15–19:16 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,000 hex characters = 1,000 bytes = 125 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 31 GUIDs as hex (shown below).

Decrypted: GUID list

  1 066af6aa-77bf-823c-9c54-4ca89989893a
  2 c7b54e2f-791e-1022-b301-2e5cc6b89ff5
  3 0dde94d7-5e0b-024b-9b32-1def7984e32f
  4 30a472d5-6526-34c7-96a1-226a5d9db1f6
  5 5aebebd0-5263-64cb-9a3b-1a5204dd4fbe
  6 74a751c3-44ed-3655-ac20-87ea3eba9e5b
  7 d9e202db-3f38-0c6d-95d2-1894effe41ee
  8 5b030020-521f-552e-86ff-81466c9fb0d8
  9 54970087-2370-78aa-969d-50ada4f14c95
 10 91625a49-c5ba-5dcc-abbf-0c63e807178d
 11 5ecf19ad-5ffc-168e-a3c4-8b3bc0b9935c
 12 301a64be-9378-8992-b94f-51afeb542cb4
 13 2d1b7d13-a21d-6def-a097-aad6d97b3332
 14 861fa535-277a-5575-8fc1-264cd4c10501
 15 b2eb314a-ea94-2c8c-920b-2c34aaec29ce
 16 87064a89-b167-1fc0-971a-66f125664c11
 17 7755c5bd-fb5d-1dbe-9ca4-20e3bc373ae0
 18 a1442975-bdd3-641e-af4b-098c0d94f690
 19 7f9b794c-48ee-8375-9f22-1a19cd645f4f
 20 13c0e357-fb26-48db-b7b6-f211e8451ce5
 21 45801393-f614-5ee8-9573-9867e85be716
 22 c4215563-28e1-5904-a3cd-ade456d449a1
 23 d00f442d-df94-60a3-930b-e08b93560dec
 24 9deeea37-5f21-4b0f-a138-23bbbbd3571e
 25 e85929c6-f533-63a7-9e33-7c4a7629ef39
 26 0357f06b-ba83-6123-8746-d85f693f92c4
 27 2d205a9e-dcd6-088b-8876-95c2b504037d
 28 b6f5ffdb-57a7-08a6-ae72-f758f6b0817a
 29 36f5eb4f-8b07-1782-94b0-6231a80966c9
 30 4173576c-9261-47b6-8b74-8e0d22e3081b
 31 2680cf89-c905-8a64-816f-db1d5b0e10c8

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8103630575186521168455646600148. Exactly this sequence comes out of new Random(969).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 14 of Run 18 (seed 6,051,781): new Random(6051781), Next(8,64) per post. The RNG predicts N = 31; the post has N = 31 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:15–19:16).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results