A858DE45F56D9BC9 archive

201208170717 yce73

explained decrypted filler

3DES(name+title) ECB, 39 GUIDs, seed 856

Metadata

Post ID
yce73
Title
201208170717 → 2012-08-17 07:17 on A858's clock
Posted (UTC)
2012-08-16 22:17:10
Timezone
UTC+9 · title 07:17 against posted 22:17 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,512 hex characters · 1,256 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208170717) = e71f30db9de57a576314125e829aeba7 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
39
Filler GUID seed
new Random(856).Next(9) ✓ verified
Run
Run 24 (seed 39,416,093) (seed)
Draw
87 · predicted N = 39 ✓
Machine boot
2012-08-15 10:18–10:21 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,512 hex characters = 1,256 bytes = 157 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208170717 (name+title). Key = MD5(password) = e71f30db9de57a576314125e829aeba7, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 39 GUIDs as hex (shown below).

Decrypted: GUID list

  1 670afe02-743d-8566-85f3-1679df09e644
  2 38cdd8fc-7410-8435-b887-cef77cf4aa5b
  3 4967bee6-ba75-04fa-a8bf-56f6e729fa48
  4 cdd832b3-89a7-2b97-b7eb-b2d0b41a7879
  5 f9d3960f-a712-630d-93e8-9f371d887f73
  6 70301666-7239-5034-a513-4bcbcbaf3e8c
  7 f9911ba6-cb5d-3b53-8dbb-3bab4897a20a
  8 4eef8d4c-328b-7a44-8fc5-c3fb2ea1d3a7
  9 9791c4db-a06a-784d-a00b-bcb468b06cc1
 10 21a7b2b4-10b2-8bc1-b2e4-fa95e4c0e21c
 11 097e23aa-399e-8bd1-95be-ad60571d5fe4
 12 c6684f32-56be-697b-8d7e-f857580fc19f
 13 d15f9b48-339a-0ea6-895a-3bdd222a2ee8
 14 7241cd5c-d3b2-774c-9677-a3a586468380
 15 f00bb618-9478-15ee-a16b-b7118550d0c9
 16 ef518cba-0e03-53a9-bac6-2125dac01b37
 17 e50f088d-04d2-69d7-aaef-7431aba7b11e
 18 989706ee-378a-6bf7-af65-0e10f23cef7d
 19 1a6dcfeb-3018-76c6-bd63-185a450337f4
 20 9cf3df9c-4451-647c-8993-f7a3e0a516d8
 21 159e6568-79b7-482d-a099-67d42ad0469a
 22 520c3692-abfd-7a8e-8345-700ef31a8d48
 23 bd7ae730-4994-5d0f-b419-4bf37d846951
 24 d498a597-4e68-08cc-82a9-155fdf706ac7
 25 04c6274e-3414-5a03-bff1-2352d56e41a6
 26 877eac2e-b017-0750-ad45-6ef6e375fd64
 27 83bc24bb-fff7-875b-9dbd-301071aaada1
 28 ea375b21-c48a-06e0-9609-a99c21148491
 29 151fd0de-c687-8463-acc3-4669205c5568
 30 416edad7-bdbc-44db-8580-5b06284ec0ad
 31 a63d0066-d0fa-18a0-a63d-e29be32e95e1
 32 e383feee-1426-8c6a-b7cb-9be15fbc895e
 33 59111a17-0a09-44c0-b340-b0bd763a281c
 34 c641b43e-791d-4ceb-bbc9-1f5ffc3107f1
 35 df85ccfb-e14f-4087-988f-6c2e13ad774c
 36 9d1d0149-d570-749f-80d3-a57ee7e781d4
 37 19293b18-f34e-0a09-acb3-ef1d6a900400
 38 ce593927-8d82-6707-980f-1e3bd9442c92
 39 1fbb7cf5-9367-8c32-af7a-d9a5cbd41bf4

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 880265377886071566764750508084184447068. Exactly this sequence comes out of new Random(856).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 87 of Run 24 (seed 39,416,093): new Random(39416093), Next(8,64) per post. The RNG predicts N = 39; the post has N = 39 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results