A858DE45F56D9BC9 archive

201208170333 ybzv6

explained decrypted filler

3DES(name+title) ECB, 38 GUIDs, seed 822

Metadata

Post ID
ybzv6
Title
201208170333 → 2012-08-17 03:33 on A858's clock
Posted (UTC)
2012-08-16 18:33:10
Timezone
UTC+9 · title 03:33 against posted 18:33 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,448 hex characters · 1,224 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208170333) = d3c7fae97d6eb6388cf668d4924937d8 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
38
Filler GUID seed
new Random(822).Next(9) ✓ verified
Run
Run 24 (seed 39,416,093) (seed)
Draw
13 · predicted N = 38 ✓
Machine boot
2012-08-15 10:18–10:21 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,448 hex characters = 1,224 bytes = 153 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208170333 (name+title). Key = MD5(password) = d3c7fae97d6eb6388cf668d4924937d8, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 38 GUIDs as hex (shown below).

Decrypted: GUID list

  1 7cde8389-a025-158c-bb0f-d8ca32726a21
  2 edf9b33c-f459-0f65-a461-14eb5541091b
  3 0bfce085-cf39-33db-ac24-9def0c24372c
  4 0b579658-0bcc-08ff-add1-b8ccb32816f3
  5 f623de05-30c2-2ce3-815d-044aae028cae
  6 53bccb10-3f01-85dc-99f5-41df15f46eed
  7 7ff31629-af9c-1e35-81c0-93e93624f1b0
  8 340440a0-8fb9-71ab-b3d3-c9e529e8cd13
  9 16cb34b9-1519-6b09-809c-bfd9fbcec9d8
 10 c033fa6e-ac21-3aea-b7ff-ba7b1a586536
 11 9e4198f0-f4b7-7804-94c2-b950ca18e7a3
 12 b3df4a33-14f7-1aa2-a145-4441988216d7
 13 cdacad79-ee0d-6416-9026-c87a22ee97b2
 14 3543b369-e12c-1512-a2c3-90c926d64ae7
 15 acf664e3-092a-3519-b674-34a93ada7a85
 16 d0f0f1c5-d5d0-33a2-b51d-e934dd75440e
 17 85936317-69f6-3c88-8fc0-574d8bcc2ab1
 18 b99a54b8-7cd3-5b2c-8907-57ed69f3ddd0
 19 d0ae0041-d795-8337-9947-3f3af3a9750c
 20 3753a986-abfb-5c43-baa1-f56016d04fa0
 21 b6f9ccde-1f1b-06ed-b697-c254f8553c7e
 22 5189e584-0a05-4d53-ad41-cb5ab987b49d
 23 94021b5a-45d8-83b2-bf55-5a9b0c442cd5
 24 6f7f04f4-b0c5-1afa-a005-779916598487
 25 ef27a18b-c847-2a41-9a32-a71cef103a04
 26 747073c5-e767-24ca-8799-e9aae8653466
 27 3051c798-9d2f-55fe-81ff-2477d5571a10
 28 c9f99358-a3f4-05cf-8c6d-4709c92283dd
 29 cd016df7-8e11-5fc2-a2a2-158031c3ba0a
 30 9cb7971e-ed62-0efd-b3d5-00bee2a8be59
 31 d14c2372-fc4b-5efc-ac1c-7e4e4caada62
 32 2dafce20-9b50-8104-bb57-c1de60850242
 33 2729ff26-f6f0-7aab-b1bc-ffa4d668ac43
 34 580ee91b-ef0a-5f66-97ce-d5673c06697d
 35 21e94f33-90d2-6e19-99b5-e7976402ac63
 36 071f9e8b-987f-3be5-afd9-633080d9898a
 37 3d3cc474-6056-8007-8c24-81aa198372fa
 38 2a52923a-a0ab-5bcc-8007-fdfc713171b4

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 10302817637161333585048122505058756385. Exactly this sequence comes out of new Random(822).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 13 of Run 24 (seed 39,416,093): new Random(39416093), Next(8,64) per post. The RNG predicts N = 38; the post has N = 38 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results