A858DE45F56D9BC9 archive

201207310601 xet4g

explained decrypted filler

3DES(name+name) ECB, 25 GUIDs, seed 22

Metadata

Post ID
xet4g
Title
201207310601 → 2012-07-31 06:01 on A858's clock
Posted (UTC)
2012-07-30 20:58:38
Timezone
UTC+9 · title 06:01 against posted 20:58 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,616 hex characters · 808 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
25
Filler GUID seed
new Random(22).Next(9) ✓ verified
Run
Run 19 (seed 257,878,531) (seed)
Draw
0 · predicted N = 25 ✓
Machine boot
2012-07-27 21:17–21:20 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,616 hex characters = 808 bytes = 101 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 25 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5bac6879-9730-1d6c-8cf6-30712183b0d4
  2 a0099d55-33e5-2842-a435-b521c1865ede
  3 c8d67309-89b8-1d7e-a6ab-60ec69acfee5
  4 33279260-bdb2-28e5-b27e-c003fa392d80
  5 5669a276-f3fc-1c63-ba67-68904ca778a5
  6 14b12f84-f5a6-7edf-a345-010d329d4004
  7 3705b313-d0b1-64c3-b2da-7915f66eb752
  8 30029305-b758-4b57-8b09-45b547dde6c5
  9 3b1e8451-0817-68ad-8e8e-e2fdf517a35e
 10 230a4eee-d9f8-3b11-9594-40490dddf3ee
 11 52e07122-2fea-4d53-bf0b-abb02222bc5d
 12 36858c7f-9334-5958-a011-59e4fb4e4900
 13 7c9264cd-c11d-6a3f-8c52-0487a904556b
 14 3d1a9fc4-5786-87e9-a12d-925f1d6ebd84
 15 dad713ab-994c-329b-8365-7eba12b18558
 16 2d1c44e0-0181-67c3-8c65-7fc4500fff2f
 17 63c5cd66-6922-0d04-a24b-5ee31fd9a2d1
 18 22416ed7-e736-5a73-b1ac-ed0291691259
 19 a831585e-4355-27aa-a1db-3ad9fc4e906b
 20 3bf895a3-2012-7b82-942d-758428968295
 21 0ca436db-e2bb-6882-93b1-6a9f511a1c47
 22 7a6ab5e9-6cb2-2a15-b2ff-57900c469844
 23 166d81c4-fec8-6ac2-98cb-b208160156f2
 24 9503efc5-edf9-6a0f-a42a-3151ec950960
 25 3634ebdc-03c8-7de3-9a93-1484e201e3e1

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1212176463456836052762667. Exactly this sequence comes out of new Random(22).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 0 of Run 19 (seed 257,878,531): new Random(257878531), Next(8,64) per post. The RNG predicts N = 25; the post has N = 25 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 21:17–21:20).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results