A858DE45F56D9BC9 archive

201208170607 yc9s8

explained decrypted filler

3DES(name+title) ECB, 33 GUIDs, seed 859

Metadata

Post ID
yc9s8
Title
201208170607 → 2012-08-17 06:07 on A858's clock
Posted (UTC)
2012-08-16 21:07:33
Timezone
UTC+9 · title 06:07 against posted 21:07 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208170607) = 76d73c1c31b3e6471c1ec3fb6f212c0e (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
33
Filler GUID seed
new Random(859).Next(9) ✓ verified
Run
Run 24 (seed 39,416,093) (seed)
Draw
64 · predicted N = 33 ✓
Machine boot
2012-08-15 10:18–10:21 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208170607 (name+title). Key = MD5(password) = 76d73c1c31b3e6471c1ec3fb6f212c0e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 be1fa36a-5a94-430a-ad4b-dd7b536bb8c9
  2 bb126e47-b840-785c-bdc4-58ae330e1f6a
  3 1be198f4-53f7-107c-ad24-80087f75c936
  4 56b50848-237f-8e6d-8aea-bfaa8184a464
  5 98b6c6c6-5e1a-0322-b3ad-2b62951a9e63
  6 6c892684-8b21-20fa-bf24-69c4912d941d
  7 e48d7b08-da35-763b-a249-ab51c26b73e8
  8 bba66493-ca43-3f7f-9308-0642c4937b22
  9 dc918a69-bcb4-2d7a-a13c-74841d1a144c
 10 1bbbe6c7-e749-056b-bc91-8fe41e9a077f
 11 1fc007b5-5afa-1829-b928-2d1e2d30bdfa
 12 eab54a62-df50-00ca-82d8-c9f5837dfbed
 13 a0fafc82-15f0-1607-8610-8fcb9965dfa3
 14 ec8fbc6d-101b-37cc-b446-f66d3e01fc3e
 15 533af9d9-7631-29e6-9c98-02b1cf7a7504
 16 c1d237f7-5260-4c15-b254-21a327e8a214
 17 78acffee-51c9-82e6-9697-658f889b6f4e
 18 66ed9f35-ec2c-55c7-84bc-dab31d96dc94
 19 858c666f-b186-8fce-a83d-09ce75595182
 20 2d2b1554-b0e3-887f-90da-69628ce02083
 21 d1eb6558-4c14-8060-a98d-ca1a62a07a8a
 22 e4ad8edb-2840-5b8e-a8f3-12beccf74476
 23 cf6f5fc2-c337-1b50-bd36-2a5f90b8f245
 24 b4500b80-9592-1a33-af43-cd1ce4873605
 25 1bc73e08-88cb-775b-943c-e8fc75ba4aca
 26 7a2969a6-f888-03b5-b801-8b17b9787bd9
 27 b563ab8c-8cf4-4916-80d5-57df4a2b0cad
 28 509d78dc-1594-8dd4-829e-729ec5895043
 29 e83e6dc5-bcce-7d34-9b2b-028c10f87823
 30 06dc1029-3430-7d48-9e36-071060415df9
 31 c6241462-9be7-2b38-a093-cadf7b6eac4c
 32 92490682-0010-6339-a4c1-dc0ca945c646
 33 0ed2a76d-a657-6f46-aaee-08c6622af119

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 471802732010132485888511704877266. Exactly this sequence comes out of new Random(859).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 64 of Run 24 (seed 39,416,093): new Random(39416093), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results