A858DE45F56D9BC9 archive

201208101816 y0py6

explained decrypted filler

3DES(name+name) ECB, 33 GUIDs, seed 513

Metadata

Post ID
y0py6
Title
201208101816 → 2012-08-10 18:16 on A858's clock
Posted (UTC)
2012-08-10 22:13:48
Timezone
UTC−4 · title 18:16 against posted 22:13 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
33
Filler GUID seed
new Random(513).Next(9) ✓ verified
Run
Run 22 (seed 528,385,484) (seed)
Draw
39 · predicted N = 33 ✓
Machine boot
2012-07-27 19:02–19:13 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 2f1e2b5b-cecb-6c6f-b6da-79ceee54cd79
  2 aa5dff89-5a55-3252-93fc-aaa2721a62f0
  3 99bd30c6-8ee3-3dfc-af09-def9d038e399
  4 e9c731a1-5a67-00cb-bb2f-fd7b4a00d6bd
  5 3aea1b58-3a22-7832-bb12-88407c841c4a
  6 bcdb3711-e5e6-7821-88f5-830e0394a12a
  7 18997144-3989-6150-b714-829018d311d4
  8 e18f9dbf-5e9b-7b18-9a95-d93faa99ac92
  9 7aec9f70-1026-314b-9740-1f219d9fd996
 10 21166186-cfd8-3d29-8a01-5ceb7568e636
 11 ed6de372-63d0-2a65-a424-ddd5429aa482
 12 5dc30802-dbb7-8489-bd21-10927da9bfce
 13 8169fdc8-17ac-2e1b-a59c-25cdc4db5661
 14 7029c50e-a562-3fa2-ad6e-b887f3322f22
 15 893cc6c8-fa1f-0540-8ecd-148139e8c45d
 16 2e65bc9f-8897-323b-867f-c2e69061bcf2
 17 ad1989ab-573e-4a31-842f-a0e5b4fa331d
 18 d83b2440-71cf-047e-be0f-6d44de25571f
 19 cf5cc086-6864-5c5f-9f61-254e75bd67ea
 20 c61ba680-fb02-8d09-b68c-6234f3244d07
 21 72243afd-e552-8aec-aa18-13f38c9561f6
 22 5edd2937-6c2c-60be-a1d4-8b154af8b6d7
 23 68a6f0f1-253e-6a09-91e3-bb59b894b535
 24 f7dcceb3-d6a4-2db0-aa10-e89af4aadacc
 25 5a7530ad-8d32-8f84-be05-77da342ddf33
 26 d22824de-94f4-44a7-856f-d371e445e3eb
 27 bf6ce283-068b-8459-9056-d707f74128b6
 28 11158acd-ba1d-4f1b-ad82-cb7f9cc2a4bb
 29 a3116c7a-b322-2b92-b98b-038bf6fa16ec
 30 a59d26ac-9a95-282e-abec-9ba766161393
 31 1517d294-ab95-5b3f-a5ee-825bb10829af
 32 36581b4e-3c76-5dc8-97a5-f93bc2a668b3
 33 08ad5924-5e3d-529d-a723-0464df5160d3

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 633077673328230340588662848422555. Exactly this sequence comes out of new Random(513).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 39 of Run 22 (seed 528,385,484): new Random(528385484), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:02–19:13).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results