A858DE45F56D9BC9 archive

201207271432 x9ocz

explained decrypted filler

3DES(name+name) ECB, 34 GUIDs, seed 141

Metadata

Post ID
x9ocz
Title
201207271432 → 2012-07-27 14:32 on A858's clock
Posted (UTC)
2012-07-27 21:30:25
Timezone
UTC−7 · title 14:32 against posted 21:30 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,192 hex characters · 1,096 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
34
Filler GUID seed
new Random(141).Next(9) ✓ verified
Run
Run 18 (seed 6,051,781) (seed)
Draw
32 · predicted N = 34 ✓
Machine boot
2012-07-27 19:15–19:16 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,192 hex characters = 1,096 bytes = 137 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 34 GUIDs as hex (shown below).

Decrypted: GUID list

  1 f202fdfd-8bb3-37ef-bd5b-6e649071fd00
  2 f1bf7bb1-fd68-1551-bc67-48215ab4bd5e
  3 2fd9a281-5b94-2aae-9c15-10609e3cb7b0
  4 f2306b03-a44a-598c-ba39-fff09570ad5f
  5 0f6734e1-4008-799b-a65d-8045b50fe3a7
  6 401e62fd-f082-7554-aef9-272b45ccc796
  7 62c2ad71-1e89-0b3b-8108-a6d83c6aea6b
  8 743b4253-8361-1a94-9842-4f65371a5160
  9 0eba2db0-7362-3ceb-be82-b974f13761a8
 10 a63ab1f1-96e1-2f7c-b89a-e983e829ff61
 11 75fb87d6-1d98-1877-a319-7c17830c0ab6
 12 7ab0067f-6fbd-4d0c-8175-9180aa21d9b5
 13 7564a12d-c9db-525e-a836-f83aa53c442e
 14 90296454-0860-744e-9bbe-17c8d51879db
 15 8a704a92-ebfb-65a1-8cd4-5a568277da38
 16 cf85f74c-948a-0cb0-8ff4-cf86550d2845
 17 bf12b31e-df07-150c-8956-0bb5e90200d1
 18 1d93637b-84bf-371d-b7f8-e86deaa23fc7
 19 9d399304-ff99-42ca-bf60-ed03f74aef51
 20 3bdb60ec-5b61-8009-a7a2-10fa4b6566a3
 21 ed330610-452a-440e-86c2-2dc1d0374e17
 22 3288d265-a81b-3490-bbd8-3a32b41476b9
 23 70b9a886-2377-72d1-8ca2-467d6c554d07
 24 c1e46c8a-279d-2363-888c-dd1c4fa86d04
 25 16cf3781-893c-481f-abc5-1a747ca2f38c
 26 fdf43e3a-0b06-1683-8f60-5c2d3587f567
 27 d05a92b4-9eb9-141c-89a1-707e089dbb83
 28 3146358a-a927-00a9-996d-457bdb25570a
 29 63271206-fa13-4cf8-89a4-aec77f6b25b9
 30 d1f326a5-696c-5db6-9f3b-b905df9137fe
 31 a52f43d0-701a-2c19-83d4-93cf905ad937
 32 bcb1b303-b32f-5784-9bae-94469bd3c12c
 33 8ab62c05-f760-86b3-b9e2-a5a0dbec64f0
 34 985727b1-55f6-40dd-b1a7-b53a341405b6

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3125770132145760134843724110452584. Exactly this sequence comes out of new Random(141).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 32 of Run 18 (seed 6,051,781): new Random(6051781), Next(8,64) per post. The RNG predicts N = 34; the post has N = 34 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:15–19:16).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results