A858DE45F56D9BC9 archive

201208170631 ycbb7

explained decrypted filler

3DES(name+title) ECB, 42 GUIDs, seed 841

Metadata

Post ID
ycbb7
Title
201208170631 → 2012-08-17 06:31 on A858's clock
Posted (UTC)
2012-08-16 21:31:46
Timezone
UTC+9 · title 06:31 against posted 21:31 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,704 hex characters · 1,352 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208170631) = 352ac5446635246d37b93990b51c6929 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
42
Filler GUID seed
new Random(841).Next(9) ✓ verified
Run
Run 24 (seed 39,416,093) (seed)
Draw
72 · predicted N = 42 ✓
Machine boot
2012-08-15 10:18–10:21 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,704 hex characters = 1,352 bytes = 169 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208170631 (name+title). Key = MD5(password) = 352ac5446635246d37b93990b51c6929, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 42 GUIDs as hex (shown below).

Decrypted: GUID list

  1 463edc45-83c3-0665-afa7-9ee36d10ad88
  2 3b633933-36a9-53f2-be78-eccffd3c91e2
  3 c841344a-8008-55c9-b609-1d70d6761fac
  4 23e35882-76d0-08ad-8757-3208057b5ff3
  5 78146f1c-3046-8c74-a76a-504c3bf84986
  6 76059636-70da-4ad2-bdbd-35effde747ab
  7 4906f317-1ca1-65ea-9efe-1125d643aaf6
  8 66237f62-be8a-3951-9f3a-659a89ec3103
  9 52f8cc6e-a6df-0058-a398-1583782ce100
 10 e71f7677-cf00-367e-aba9-03c44d515501
 11 d5de29c1-241f-7bcc-8ce4-4142ea61ae59
 12 82f36c97-2f69-0304-ab62-81f82120609d
 13 68adc173-92eb-7687-94ab-6439e1e06c4c
 14 33f31758-6282-00c3-8920-b1a47bc211d7
 15 7b022181-9374-5e70-b19c-317ddf4cbae9
 16 875744e3-a63f-27b2-b148-b8affab356b9
 17 b85c331a-2185-3724-9cd8-6972ab06180d
 18 a1a405f1-bc85-31c9-9fe9-2f76081ddee7
 19 e91d76a3-adba-3b16-a37e-37968c900e66
 20 378cc6b7-f517-8d28-a78e-323e3fead0d5
 21 7e7636f1-a02b-5359-b613-b242ddbd2a1a
 22 301b13df-2098-1713-9479-bee3f0a0fcea
 23 42c1916a-d50a-1ea9-9977-7617363ec544
 24 3b3f2d37-980c-7b62-8b59-ef45662b3fbb
 25 634f4e4b-1351-1274-b802-29b33b9427dc
 26 d9a7dc5f-1820-325f-89dd-4a6229491ae8
 27 382b621e-0736-81a3-86f7-8842446eb325
 28 216545b5-bc8b-790e-935b-abfaac568d5a
 29 6ef2fca0-e149-7b17-a334-d162610c0106
 30 695dce61-7f1e-3120-8f35-875d8ecd3b69
 31 d3a1846c-77db-5cfc-bad1-7374ac83bbbf
 32 a165578e-e115-8266-8b90-7366c6b1637f
 33 c719f57c-c0e7-40ff-9a88-1d115aeedc6b
 34 b54eb55b-730d-0cf0-a79d-ad08f2091d8d
 35 3ae78e11-d121-2cf3-aa30-6d2b1173c5a0
 36 56003924-f0c6-1920-b79b-2f4e038ccfce
 37 c1506541-82da-658a-973b-2f484694abcf
 38 b79a3f5d-71dc-4aed-bb7c-d33afb9fc8c1
 39 dcc36c7e-007d-337c-ae3c-4a3cef39efa6
 40 c9f0b212-3362-41bf-a734-304e1e03fabf
 41 684b2038-930f-172a-a258-c0433b7b8d6f
 42 59f43bf5-c380-3571-8bab-c7038319d92e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 055084630370705233385117138773584021643413. Exactly this sequence comes out of new Random(841).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 72 of Run 24 (seed 39,416,093): new Random(39416093), Next(8,64) per post. The RNG predicts N = 42; the post has N = 42 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results