A858DE45F56D9BC9 archive

201208170540 yc8c2

explained decrypted filler

3DES(name+title) ECB, 39 GUIDs, seed 316

Metadata

Post ID
yc8c2
Title
201208170540 → 2012-08-17 05:40 on A858's clock
Posted (UTC)
2012-08-16 20:40:18
Timezone
UTC+9 · title 05:40 against posted 20:40 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,512 hex characters · 1,256 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208170540) = 1b5db92f617c6607a40f44b760d5bc56 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
39
Filler GUID seed
new Random(316).Next(9) ✓ verified
Run
Run 24 (seed 39,416,093) (seed)
Draw
55 · predicted N = 39 ✓
Machine boot
2012-08-15 10:18–10:21 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 1
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,512 hex characters = 1,256 bytes = 157 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208170540 (name+title). Key = MD5(password) = 1b5db92f617c6607a40f44b760d5bc56, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 39 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d611d1a8-a85e-75b0-a931-67f37fa9bddf
  2 982e9702-4a86-4581-a8a2-8a336df72c54
  3 feaf35df-2ff4-592e-bc72-079c631a5627
  4 46824bc4-8496-05bb-a2e4-649a175be614
  5 481ec89e-2552-7355-8397-cbc49f394bd2
  6 a9d93ddd-a0f0-6b48-b06d-199b4595f61f
  7 824bd71d-fd81-48ae-bf9b-26500c27ff68
  8 6f264004-3c54-84e4-a983-55ea32802aec
  9 c0ed6c3d-135a-035f-80a7-90635269415b
 10 d1474411-3133-71e3-ad2d-f55067bfe6a9
 11 4b28aa16-2e3e-0afc-807c-067e9a00f00f
 12 6b09c7fb-c962-1209-8ca6-c458eb667745
 13 51ec598a-bd0d-7d1f-9c83-74fdf70cbb80
 14 7b09f94b-9849-7bc8-9af1-a1a0e725a834
 15 c51f18b9-5b2b-15d3-8cc7-7f6a40936f21
 16 e1ae4f30-3116-310a-bdec-ddf4b2f50ef9
 17 f9db5144-78fb-6aa9-9815-a823da70522b
 18 5d728766-c8bc-89f0-8b8d-bf62e6de1b44
 19 4c3653d9-0b93-26f9-87ec-ffc7a8441c5f
 20 792182b0-2e44-66a3-a3d4-bc8630f8cf13
 21 ba689107-cb0d-7186-b6ca-2bfbcac88744
 22 009abfcf-e387-3103-aebd-2a20f054611f
 23 09aea80f-8947-349d-a559-f326072744e7
 24 294d06bb-52c5-3076-9f00-a54c1eaada9d
 25 ce689fc7-deb2-65ad-845e-bd950026f948
 26 cde4b7fb-5c1a-6e41-8d46-4144c5002e96
 27 741630c3-0de8-5fb1-8885-554937ed2a4f
 28 118c9a37-993d-42e0-9d52-90d13ef5e680
 29 3bc4a344-7057-7134-8700-8bc9483f1da1
 30 b9ab0872-750e-567b-b431-b81ed1cec745
 31 61d93b3b-97b8-7088-80eb-d2d970911362
 32 ff6f4168-b367-60ae-a98b-7f842c2c27a0
 33 58e22593-b5b7-3915-b277-09defaaacf59
 34 f00f34bb-081a-8761-b517-722879e24b70
 35 6e33b319-4cab-8274-b4c4-ddbc58fb612f
 36 0dd5fc0d-e99c-461d-918f-2cc438592273
 37 12cda8a4-d8ee-7955-b045-4e45955c666b
 38 1dd1ec8e-f1d2-6aa7-a233-bb4a5938fce1
 39 5cce1283-d80c-4b86-bb51-a80695847c5d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 745076480701771368267333665475763884764. Exactly this sequence comes out of new Random(316).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 55 of Run 24 (seed 39,416,093): new Random(39416093), Next(8,64) per post. The RNG predicts N = 39; the post has N = 39 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results