A858DE45F56D9BC9 archive

201208151719 ya719

explained decrypted filler

3DES(name+title) ECB, 26 GUIDs, seed 278

Metadata

Post ID
ya719
Title
201208151719 → 2012-08-15 17:19 on A858's clock
Posted (UTC)
2012-08-15 21:19:03
Timezone
UTC−4 · title 17:19 against posted 21:19 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,680 hex characters · 840 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208151719) = c6c461eaa7104af6c20a99648b5bbdb6 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
26
Filler GUID seed
new Random(278).Next(9) ✓ verified
Run
Run 24 (seed 39,416,093) (seed)
Draw
1 · predicted N = 26 ✓
Machine boot
2012-08-15 10:18–10:21 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,680 hex characters = 840 bytes = 105 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208151719 (name+title). Key = MD5(password) = c6c461eaa7104af6c20a99648b5bbdb6, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 26 GUIDs as hex (shown below).

Decrypted: GUID list

  1 88ca939e-5979-802b-8486-2acce7badd54
  2 9e562e36-1efb-3846-9f72-e3b3ad2d0660
  3 cfa0f334-e554-0823-aa91-a2fad33e8c07
  4 c809fcb8-750c-8e4a-87ea-9c3a37470096
  5 c6818c98-94e9-6c5f-bf3e-32bf4e69f1e9
  6 cb3168fb-d883-449a-8a91-a12bd99e703d
  7 29eee64f-c5b0-4cd6-a2ff-5be1397037e6
  8 8e7e594d-57f6-89c9-9c76-223de5da1876
  9 c3b516d5-553d-3747-b26b-1a9ae4962dcd
 10 2e87c750-04d8-7d30-b80e-92d5d9437ccc
 11 b975bcfd-06f1-0689-8b2c-63311f9cdd2c
 12 361de96f-9cb1-463a-9e96-a39a46ed99d4
 13 e4b75fdb-ce28-671d-8cec-a4162f83cd31
 14 d6adc4ff-ca6a-0250-945b-7c924384989a
 15 06e8c9bb-f076-5632-aad1-2b2294f0ac4e
 16 1084c4e1-a741-578a-8f21-ea6f94f985f7
 17 25fbc529-f492-604e-8c55-8d8537bede7c
 18 9c317166-691a-3923-a55d-5366c47f4c66
 19 20e6d3f7-6b67-137f-a2b7-cd7b203c3d5b
 20 8389f764-1c80-88a3-9c64-4ff518f9f2ca
 21 ac45976b-d72d-6301-a3c5-1f51156d9290
 22 28193e26-603e-031f-a230-1306e8b355ba
 23 086ed9ad-61cc-894d-8610-6e29e9133a21
 24 612ebeb3-ff4c-1cd1-ac17-82e6885f6849
 25 dec317d2-46e4-8552-985d-9b4165b7d496
 26 3716116e-5753-2094-90c2-bb62787f1044

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 83086448370460556318608182. Exactly this sequence comes out of new Random(278).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 1 of Run 24 (seed 39,416,093): new Random(39416093), Next(8,64) per post. The RNG predicts N = 26; the post has N = 26 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results