A858DE45F56D9BC9 archive

201208170534 yc815

explained decrypted filler

3DES(name+title) ECB, 30 GUIDs, seed 99

Metadata

Post ID
yc815
Title
201208170534 → 2012-08-17 05:34 on A858's clock
Posted (UTC)
2012-08-16 20:34:15
Timezone
UTC+9 · title 05:34 against posted 20:34 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,936 hex characters · 968 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208170534) = 6b6dc7250677d6b4fbd22dbc0d956db1 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
30
Filler GUID seed
new Random(99).Next(9) ✓ verified
Run
Run 24 (seed 39,416,093) (seed)
Draw
53 · predicted N = 30 ✓
Machine boot
2012-08-15 10:18–10:21 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,936 hex characters = 968 bytes = 121 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208170534 (name+title). Key = MD5(password) = 6b6dc7250677d6b4fbd22dbc0d956db1, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 30 GUIDs as hex (shown below).

Decrypted: GUID list

  1 54014c5a-1d99-4970-aba0-705ad61853e3
  2 1deb700e-8dbc-7d23-a3fb-dd33a4ea4f36
  3 3041b716-a1a7-8013-84ef-66494687af58
  4 f95292e5-a6f4-623e-bab7-2e20147eb689
  5 99d15d3a-8e27-8103-b6d7-a705f9579854
  6 783bd1dd-b770-09ba-bf0a-caf4b67b9f2c
  7 28030c2d-62de-2f46-8f63-03d50d681da8
  8 00b2bdd3-92cb-0085-9d4e-3b4cf793d81a
  9 2d8d14af-5a9b-2e1c-8982-e7f94c927cee
 10 d9a79fba-e277-7504-a19f-0eb3f86b4947
 11 b70f2909-28a0-2700-886e-0ed482e6cdc2
 12 ec66642c-f6a3-6fa7-82d4-c36ffa5fa445
 13 0bf5962c-3032-63e5-b5c3-9b9a723227fb
 14 781bea67-7bf7-81f8-a9b2-e795b8982d57
 15 e27ee891-60cb-27f2-b9e9-4475b96c7fee
 16 28440436-4b13-7654-a42f-884ede04bccf
 17 1f2586ad-f557-40c4-8b8e-7dbbdddd04ef
 18 2be701a6-472b-35ea-b603-97f527fe1ddf
 19 6435ab35-fa97-377b-81dd-204386c2c905
 20 61e84019-a34e-5749-97c2-7c779febcff3
 21 d4ff6e0d-c28e-8815-acef-4731f3631205
 22 7b64c34b-8587-184f-b5e7-a9a31fd46ea3
 23 418a0d5e-8518-6fbe-b797-0b8bf6dce353
 24 f6654b77-6386-5228-9dcf-7b8ae7d83fc1
 25 211abbc9-eec7-3294-86f8-022c131f6871
 26 d84c381d-402c-18f5-bcd9-940278a482d8
 27 aacd5a4b-eed8-0cbf-afe8-98e2812d09b2
 28 ef9afff5-3460-075e-bc4a-edd3b6a6433d
 29 37f75d88-6d22-80e2-bcf3-6dddec2ea451
 30 f0149b90-20fd-7c55-a257-e925030bd483

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 478680202726682743358165310087. Exactly this sequence comes out of new Random(99).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 53 of Run 24 (seed 39,416,093): new Random(39416093), Next(8,64) per post. The RNG predicts N = 30; the post has N = 30 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results