A858DE45F56D9BC9 archive

201207271438 x9op7

explained decrypted filler

3DES(name+name) ECB, 29 GUIDs, seed 891

Metadata

Post ID
x9op7
Title
201207271438 → 2012-07-27 14:38 on A858's clock
Posted (UTC)
2012-07-27 21:36:30
Timezone
UTC−7 · title 14:38 against posted 21:36 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,872 hex characters · 936 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
29
Filler GUID seed
new Random(891).Next(9) ✓ verified
Run
Run 18 (seed 6,051,781) (seed)
Draw
38 · predicted N = 29 ✓
Machine boot
2012-07-27 19:15–19:16 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,872 hex characters = 936 bytes = 117 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 29 GUIDs as hex (shown below).

Decrypted: GUID list

  1 411fb453-4ad1-1943-84dd-26db270829ab
  2 3e86328a-f458-23a9-91e8-58c58ed72acf
  3 38d54e60-8f07-51f7-bb59-acac4b4678b3
  4 5b2f95c1-16f1-6d7d-9428-344f85b96805
  5 cb4aa5eb-fba4-4bd1-9287-c39247e0c5ce
  6 8a2e7163-067c-155a-a5ef-9f06142549fb
  7 cfe9f0aa-e4d1-1e72-af47-84a6cd1badfe
  8 0c3455a7-2706-3070-bd70-9d64bf6c6898
  9 4ab0ea35-af0f-1032-8bb1-7a581c1265bf
 10 b81cfbf2-1631-751d-a026-1f7708dfcb6a
 11 29f9c67e-c0b2-6f47-978d-f6c1cc367759
 12 ef3fe0ef-0db9-069e-83c6-33b69769c3e2
 13 8765ea40-0cce-17a2-b768-ad23af0a983a
 14 9e6fe0af-85ea-0945-a166-4bc8dc9f0c33
 15 4e4faf66-08b3-5890-8879-1e4d7d37d3a9
 16 a15573bc-1f04-4352-8ece-3fff38d77a89
 17 0b39acc1-328b-3e8f-a544-7c39f7a59543
 18 0a1c0a2c-7fc8-3d28-88a7-37d94164b5f3
 19 ce6fb16d-07db-7ed6-a260-92c5cdf45890
 20 ec5cb83a-3940-2809-937e-2ab54f66692d
 21 6ae9e8b0-9622-1db7-985f-ab4e71189542
 22 78458b77-42b7-382e-a702-b47545251fb2
 23 a17fe99d-ab2c-53dc-8a94-f3048fd5c9fe
 24 5b2b323f-a9e6-2304-80a0-d47d33849a65
 25 e1cf91cd-7dd8-0a7c-a459-524547aade58
 26 3109119f-b256-5d5b-8154-04b0d4c5763a
 27 fe5f9c1a-118d-88ac-a8d9-259949e32cc0
 28 4f86e892-0153-6027-8a04-88d98fdab2e5
 29 6eaf8e42-b8ab-5afd-b7b5-ff88486fbd79

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 12564113176010543372135205865. Exactly this sequence comes out of new Random(891).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 38 of Run 18 (seed 6,051,781): new Random(6051781), Next(8,64) per post. The RNG predicts N = 29; the post has N = 29 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:15–19:16).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results