A858DE45F56D9BC9 archive

201208011758 xjcz5

explained decrypted filler

3DES(name+name) ECB, 32 GUIDs, seed 960

Metadata

Post ID
xjcz5
Title
201208011758 → 2012-08-01 17:58 on A858's clock
Posted (UTC)
2012-08-02 00:55:34
Timezone
UTC−7 · title 17:58 against posted 00:55 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
32
Filler GUID seed
new Random(960).Next(9) ✓ verified
Run
Run 21 (seed 452,527,359) (seed)
Draw
0 · predicted N = 32 ✓
Machine boot
2012-07-27 18:58–19:13 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a20199c4-2499-21e6-9aa4-1d555cf2f276
  2 0b8da829-9cdc-4087-a93e-951bc526ad37
  3 51c512ed-5b62-73ab-949b-1af770ec3aba
  4 d8c8c230-8379-47ea-82ac-07ed25bf7801
  5 d3b0283b-9fdc-530d-beb4-c521c63e0b0c
  6 7fd94865-d1b4-4345-ade4-32d57aa19754
  7 6a66f510-02a3-0bf6-9aea-f425bef4b134
  8 5411a77f-e0be-0b3e-b589-f8f6ff45b2e4
  9 a41f331a-6145-6fc1-aceb-aba0dae4df70
 10 01d674f7-ee7d-2bbf-86b8-8a0420e38f53
 11 4914e959-a31a-4be4-b576-1adaf9b98189
 12 9273a956-46d5-8596-bda1-5ebdab9e7f6c
 13 580a7058-50c9-53fb-acae-144ffbde0777
 14 98a503ed-97bb-8eb9-8f05-2e8240427d83
 15 c21bdc54-4249-82d5-b2b3-f2235f8462af
 16 acef5303-8ba2-56a2-af32-1198bb6dd9e1
 17 e1d49e22-921d-3380-a127-f7dcf6134858
 18 e93ccf7c-f4c2-1c4d-8578-d30cf0468585
 19 0e3bf75a-bd72-5ca9-bbaa-f10ce6341b43
 20 707d030e-efbe-0ec1-893e-d6b945b3cf0e
 21 21adb7ec-b3b1-3f07-b3ab-c7b2a7a1ebb4
 22 cad6341d-6f70-34d2-afb3-7ae118c49993
 23 81817582-2a2e-2e4a-a1b8-e5dd0e82d156
 24 3de8970d-c411-31f2-aad7-d9386feac84b
 25 3917f061-13d1-7bd2-b47d-1d677d458441
 26 e131f1af-bc17-840f-879e-6d24b4b40a4d
 27 e0f41e6d-bd9c-2a5c-8c3c-9613b7db7e80
 28 2bfeb096-57a1-4cb3-bdde-c4967704dc9f
 29 036e63bb-e086-643f-9443-3f3d65136ee1
 30 638a9623-f3d1-2042-a61d-0f1fad7720d0
 31 46155aaf-23cc-5c09-8844-bedad39c202b
 32 6bf26098-05f1-2ad2-9218-6a70438f7392

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 24745400624858853150332378246252. Exactly this sequence comes out of new Random(960).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 0 of Run 21 (seed 452,527,359): new Random(452527359), Next(8,64) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 18:58–19:13).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results