A858DE45F56D9BC9 archive

201208131850 y4z4e

explained decrypted filler

3DES(name+name) ECB, 33 GUIDs, seed 232

Metadata

Post ID
y4z4e
Title
201208131850 → 2012-08-13 18:50 on A858's clock
Posted (UTC)
2012-08-13 09:47:26
Timezone
UTC+9 · title 18:50 against posted 09:47 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
33
Filler GUID seed
new Random(232).Next(9) ✓ verified
Run
Run 22 (seed 528,385,484) (seed)
Draw
78 · predicted N = 33 ✓
Machine boot
2012-07-27 19:02–19:13 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
12 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 dc6d99d5-6915-86c7-bd2e-1b0dc517bba7
  2 aa62fe45-abc6-8c92-8a17-8c0f52f1da0e
  3 023be91c-cc81-8e37-af63-60e457a838c2
  4 6d840ae9-fc16-0359-beef-34c22a4011b0
  5 e1bf690d-6e6a-81fb-adcf-5933fa0339f6
  6 e8df071b-6e78-2fa5-81ae-4ecc6d95f5e3
  7 65756b50-7076-7c37-bdc2-e87567643ce9
  8 3360a97d-5988-7684-a7c7-a1708b4db4fe
  9 565a25ee-f3f3-6bed-a43c-a261d7dccb4e
 10 362aae0e-5b7e-7d6a-9d5d-760413b6d61d
 11 4a12017a-2298-11ee-b88b-385e77c010f1
 12 90ab5586-d6f2-5a0d-9bf4-4cd2e5ff63ae
 13 a20bff89-24e9-16f7-b392-44f1e757f402
 14 bc10e9a7-d766-1f65-9308-cf1ff8477326
 15 f78b2fca-ce92-3cb6-8fe5-fa732400dccf
 16 46b38433-147a-8919-8067-89824916ad12
 17 f5282591-1152-3892-aa15-1cf830841b4c
 18 188f7c38-c4ee-7f94-bc75-7bbd4ac68849
 19 334cb275-08c2-8df4-8b2a-54f86e1e6766
 20 e1d77f80-5537-17ef-afbd-9a26240885eb
 21 f91f190a-425c-517d-a52f-bf8cfa71e273
 22 87a8f5e2-2d99-6db9-af65-70bbdb62dcfe
 23 f16ade73-b65e-1c57-9639-57e30553b199
 24 e5155b81-21d0-095c-8bdb-e09690e89847
 25 aa98e32b-87a1-3e96-a44d-4d80a60595a6
 26 5e9ac7dd-f760-6e97-a082-1c955db14602
 27 a0daa58d-a861-38a0-b6ad-c1fd1dcfbca9
 28 1205cb48-a8a4-38c4-afd7-2de1840ecb98
 29 a17f2177-c24c-5b61-89e8-38ae5304d8bf
 30 a906a879-4150-8320-88ce-43e109b58e67
 31 fad690d5-b256-72a4-acb6-eaa7e2abb9c1
 32 ac7de1bc-c7cc-5785-841a-f7cbf916e891
 33 08ed3246-d563-50e2-a8ff-3f604f8f3095

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 888082776715113837815610363358755. Exactly this sequence comes out of new Random(232).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 78 of Run 22 (seed 528,385,484): new Random(528385484), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:02–19:13).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results