A858DE45F56D9BC9 archive

201208170421 yc37m

explained decrypted filler

3DES(name+title) ECB, 41 GUIDs, seed 818

Metadata

Post ID
yc37m
Title
201208170421 → 2012-08-17 04:21 on A858's clock
Posted (UTC)
2012-08-16 19:21:43
Timezone
UTC+9 · title 04:21 against posted 19:21 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,640 hex characters · 1,320 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208170421) = 727fc567156135f2a8f6e71909d8c6c2 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
41
Filler GUID seed
new Random(818).Next(9) ✓ verified
Run
Run 24 (seed 39,416,093) (seed)
Draw
29 · predicted N = 41 ✓
Machine boot
2012-08-15 10:18–10:21 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,640 hex characters = 1,320 bytes = 165 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208170421 (name+title). Key = MD5(password) = 727fc567156135f2a8f6e71909d8c6c2, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 41 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3c1fe972-a5f3-0fe1-81b1-2429884bd56e
  2 c63243f7-11c4-78d0-962a-fa9ad7eda5e1
  3 c010d43f-3926-46b7-a499-29d37e62fe9a
  4 94b9b840-711b-1dd4-882a-ceeaf866472c
  5 b433242c-47a1-44c3-9194-2a7085a310a8
  6 a0f497e5-e8c7-3ca9-a68e-9248ccd35e93
  7 221287f2-b3a4-3c76-abba-724571437d0e
  8 bb852560-9a2b-7780-9ed6-7bc0abfbef99
  9 4a898c33-ce2e-10b3-a9b5-5c08f95db987
 10 3e1ed528-0c7f-82fb-af19-83cf95cf97a7
 11 94c6aac5-5d43-8947-9465-f44d121d7cff
 12 8cf6f3dd-0d46-0a39-9629-7fce91eb0ff2
 13 1d870840-7e28-8fc4-a55b-914de9d10d19
 14 11005a69-364b-02fd-a017-0247e2ac41d5
 15 4adc1794-6b94-531b-9cb0-61bc30f4f718
 16 314d40ae-f54e-785a-b5af-4e8e9e0fdadd
 17 b1f18659-c5cf-6f65-8e7e-39ecde7715e3
 18 23254493-cc95-117e-9423-87d39815b2db
 19 6abfced1-d605-7a31-9964-cfb0578d316f
 20 f43f187e-e407-0729-b265-142d82d2cf7f
 21 7a17f85c-5ce2-4f6b-a605-1504d843c705
 22 39a98771-ba85-47e6-834f-ec7a49e90e64
 23 1da39d27-8ea1-2dff-8a67-1185c8e7a53c
 24 f51203db-15bd-7cd1-b504-28b94302a4fd
 25 4c776228-ca3e-71c5-83aa-b772d50d8b84
 26 29fa8a02-44b1-54cb-816a-64dff33a774f
 27 2e3fe7f0-5a53-1e63-832c-298e876c1ada
 28 13ff75aa-e7ec-4f5e-9164-fe4a8beb2699
 29 7a8fe316-dadb-4ce4-b387-79f4a67558c3
 30 aff4b082-e72c-7d0b-b571-c98ed8a711bd
 31 fbb311ed-abe3-1cf9-a580-dd844d826e3d
 32 18d79c60-ee25-8d1f-8f2e-0672fead0c5e
 33 28a14e26-f943-2f85-b731-0d00f4cb31a2
 34 36c2f194-3f38-4c99-9dac-8ceb94cc1d10
 35 a1c3f5ee-646b-2611-9a83-3f8c119f8300
 36 e3488878-8330-138e-9334-54e724c0118b
 37 9a0d296d-89a7-5c10-aa9c-1b968f949f87
 38 79735437-4a5f-7525-824a-1de7687a732b
 39 1f95ae7e-e9d5-30f4-9b35-bbf98e72cb04
 40 ded56a76-2767-3eeb-ae82-03fddc385a8b
 41 737b1ca5-1639-45b3-9eec-01297d20d5d8

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 07414337188080576170442775144718242157334. Exactly this sequence comes out of new Random(818).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 29 of Run 24 (seed 39,416,093): new Random(39416093), Next(8,64) per post. The RNG predicts N = 41; the post has N = 41 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results