A858DE45F56D9BC9 archive

201208131855 y4z99

explained decrypted filler

3DES(name+name) ECB, 25 GUIDs, seed 279

Metadata

Post ID
y4z99
Title
201208131855 → 2012-08-13 18:55 on A858's clock
Posted (UTC)
2012-08-13 09:52:27
Timezone
UTC+9 · title 18:55 against posted 09:52 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,616 hex characters · 808 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
25
Filler GUID seed
new Random(279).Next(9) ✓ verified
Run
Run 22 (seed 528,385,484) (seed)
Draw
79 · predicted N = 25 ✓
Machine boot
2012-07-27 19:02–19:13 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
10 · 1
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+namerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,616 hex characters = 808 bytes = 101 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 25 GUIDs as hex (shown below).

Decrypted: GUID list

  1 85c3dcb8-902b-4440-8c3e-fbf01924fd41
  2 06e0c8fc-0a11-60d6-b9ef-6263cfdbe4d8
  3 354c6c4a-706d-791e-89d8-8ba456710eac
  4 87f166ba-560f-0585-b594-78a6995c3d02
  5 4a39ca67-7af7-15b0-9fda-a11debfb9495
  6 7484944b-89e2-3cee-993d-243b7fbb2d48
  7 1e7b2bc5-354c-806c-bae2-b44c215d74b2
  8 a4fd9b25-1957-3497-8bf1-713f6fe7e9fb
  9 d594f13d-d1a7-4625-b347-82efd9cc8b15
 10 4492f328-0fc6-1bc7-9844-f978897797c1
 11 2bf33aa2-a4bc-71ce-8f5b-6741ea2d6dd0
 12 446737d5-3b89-2682-9f88-64d08c78f6d6
 13 02d42aca-3280-3810-9b13-8e2ec400c392
 14 6f663f5a-ebe3-5056-9fd6-6e1490ffbe74
 15 97a0400b-0806-2000-bca9-5d08ef034a14
 16 ed848f47-7b89-2bcd-9744-dc7964b2da75
 17 8cbe2295-039d-1778-b5fa-8e011a739314
 18 9d1693b0-d19f-8c54-9aea-1d3b1be0f081
 19 6dd524a9-2bb4-21f1-b562-9c4fd4fb3fc8
 20 f3cb2cf5-60b1-35ea-be73-63401784799a
 21 8cea57cc-ed81-7a4d-9173-519f5d63bfdf
 22 c165dcaa-2f78-28c6-88f3-cda3a6c3784d
 23 337452a6-3e07-1bec-8c85-a9fb8376c2cc
 24 6e3a2778-91ec-4ba1-b001-5de2a916e92d
 25 9efe890e-2574-0cc7-8b09-e9ccd285d0c5

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4670138341723522182372140. Exactly this sequence comes out of new Random(279).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 79 of Run 22 (seed 528,385,484): new Random(528385484), Next(8,64) per post. The RNG predicts N = 25; the post has N = 25 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:02–19:13).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results