A858DE45F56D9BC9 archive

201208170625 ycaw3

explained decrypted filler

3DES(name+title) ECB, 32 GUIDs, seed 457

Metadata

Post ID
ycaw3
Title
201208170625 → 2012-08-17 06:25 on A858's clock
Posted (UTC)
2012-08-16 21:25:43
Timezone
UTC+9 · title 06:25 against posted 21:25 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208170625) = 71dd06437a9ab2829f4685dd2d76eb26 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
32
Filler GUID seed
new Random(457).Next(9) ✓ verified
Run
Run 24 (seed 39,416,093) (seed)
Draw
70 · predicted N = 32 ✓
Machine boot
2012-08-15 10:18–10:21 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208170625 (name+title). Key = MD5(password) = 71dd06437a9ab2829f4685dd2d76eb26, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 8fe0d0b7-52de-4e37-a7c3-b2ebfeb2afad
  2 2633a7c8-9ecb-883d-96d6-2c0d43c020b9
  3 22175a0e-12a2-1a13-9177-ceba2709ee63
  4 e1d421c4-7869-0527-9cdd-9c73aa567df6
  5 e89efeed-c155-48ee-ba31-c18c9a7dc47f
  6 9578aac1-343a-8423-8fcd-e82b16924b94
  7 25c0cc02-8152-6ced-be1f-bd3dde04436d
  8 8c3070d1-23c3-667d-96ba-a4d1499e221e
  9 a3ab9e1a-7172-4cab-8178-dd4d79c3a520
 10 e15dd37f-d1f2-7fb8-a4d0-50e85ce90e99
 11 4151e37b-697a-8aa8-aba0-3db93987d752
 12 727ee109-99d6-24de-9191-eee6b3016e96
 13 85fbb8d7-e918-7cd5-840d-2a4434524363
 14 1feee21f-278b-2ed2-ae6f-cf87b4680a8c
 15 279d36f9-835a-7c34-af18-5d9e349c688e
 16 9fd8ec37-6c5a-3d3b-9d5b-ec180da31087
 17 c79fc1ac-ae36-86ea-afa8-69b6e47f66a1
 18 2c96024a-56be-394f-911d-d6fbd563c49a
 19 6cf4d20f-8d7c-0e6b-9cb5-e34b6e9f3359
 20 e6f5da82-287d-261c-ae69-70523e7f60da
 21 325ab0f2-68c1-4f5c-a9b6-1132d535b86f
 22 586f236b-2e44-8775-b97d-d0afaaea3f64
 23 32b616c7-0372-23d3-8a01-3af7fd431ed0
 24 f1c2ed4a-949a-60d1-9fd8-dbeeee184843
 25 5a4f649a-a1a0-492f-920c-f8300c4601f2
 26 a1e3f060-752e-406d-b8eb-32b571be9846
 27 1ac1c893-639d-7665-8617-86ebffafc54f
 28 a6f182cd-db3a-77de-83fc-0210674af9f9
 29 99e16e60-5a3e-6e5b-83e0-f6ac46824696
 30 e0088654-6b05-1aa1-8e0f-b8254fdf49e7
 31 6507f2b3-7ea4-8061-85e7-79e14f53a225
 32 1f5ef088-3e84-7d3d-8224-3bceaa358133

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 48104866478272738302482644776187. Exactly this sequence comes out of new Random(457).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 70 of Run 24 (seed 39,416,093): new Random(39416093), Next(8,64) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results