A858DE45F56D9BC9 archive

201208170640 ycbww

explained decrypted filler

3DES(name+title) ECB, 28 GUIDs, seed 310

Metadata

Post ID
ycbww
Title
201208170640 → 2012-08-17 06:40 on A858's clock
Posted (UTC)
2012-08-16 21:40:51
Timezone
UTC+9 · title 06:40 against posted 21:40 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208170640) = 87de91b772ea732aaa070a90631f1780 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
28
Filler GUID seed
new Random(310).Next(9) ✓ verified
Run
Run 24 (seed 39,416,093) (seed)
Draw
75 · predicted N = 28 ✓
Machine boot
2012-08-15 10:18–10:21 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208170640 (name+title). Key = MD5(password) = 87de91b772ea732aaa070a90631f1780, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 f1b34f13-4dbe-6702-92fd-b99278201716
  2 c741607a-ebfb-6dde-9296-14fcb56004e4
  3 c03682c9-e342-4df0-a683-da38f4cd3253
  4 3c5ca42b-4ba5-6399-be7d-2fd88347ae9f
  5 080c64f8-a639-1dc3-bd47-d3cb8c825774
  6 417d95e7-41b0-482a-8fbb-cd79c88f20ad
  7 d222f0a6-268b-779f-bb2c-0c9a8d78b13b
  8 7114aac6-d774-8d8d-9578-78ecf3f02724
  9 6b2dfac0-aec4-28e4-b0f5-2c5cefca698c
 10 2f86caab-6ff6-5c55-b59f-6de927724693
 11 d3960017-cd98-6100-9df4-62c40dbfafcf
 12 ed5cc29b-74e2-47d2-afed-4a78f21260a8
 13 896528dd-5bf8-6adf-b0a1-23ee1f9ccd17
 14 95f5d3c6-2408-6404-a87a-4a9b7019c428
 15 f5bab595-cf17-8767-8d52-fd8fdf59644c
 16 e48ad89d-890e-51ab-aac5-a07b1b0e25df
 17 d403fe1a-7d95-1e89-a55a-aa75fae4efc8
 18 355cd307-a855-1762-a6d6-3b87434bf91c
 19 add2e9e7-1c5e-073f-a756-0ee1f9d51951
 20 645783a3-4787-3151-b309-054612539101
 21 93485464-1c4e-07d6-9f48-e1087d419e70
 22 146f6414-e338-8bf0-92c4-373d45b8b746
 23 5fff1dde-5f7d-3bb6-9bba-9718c7aed388
 24 5681cfcd-6676-2a8d-8912-49f133bd023d
 25 0ef006e2-94b3-02a8-a2f5-beb73ef8bd20
 26 d09c80c9-a4c7-8e71-ab4c-bfedad81e782
 27 70ad56a6-9712-4bd4-a7c6-69c73a3bf5bf
 28 51200fab-9bae-63b7-a3d4-4b7a791e3beb

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6646147825646685110308320846. Exactly this sequence comes out of new Random(310).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 75 of Run 24 (seed 39,416,093): new Random(39416093), Next(8,64) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results