A858DE45F56D9BC9 archive

201208310653 z3mve

explained decrypted filler

3DES(name+title) ECB, 34 GUIDs, seed 50

Metadata

Post ID
z3mve
Title
201208310653 → 2012-08-31 06:53 on A858's clock
Posted (UTC)
2012-08-30 21:53:00
Timezone
UTC+9 · title 06:53 against posted 21:53 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,192 hex characters · 1,096 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208310653) = e6af771d957dd0bfc828336a60985f6f (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
34
Filler GUID seed
new Random(50).Next(9) ✓ verified
Run
Run 27 (seed 1,337,299,625) (seed)
Draw
0 · predicted N = 34 ✓
Machine boot
2012-08-15 10:07–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
14 · 1
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,192 hex characters = 1,096 bytes = 137 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208310653 (name+title). Key = MD5(password) = e6af771d957dd0bfc828336a60985f6f, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 34 GUIDs as hex (shown below).

Decrypted: GUID list

  1 dc449d84-b78f-7ad5-b304-1c6be2438be2
  2 b037d56b-be56-492f-898e-19f0bdc4753f
  3 377af27c-6823-6ec0-a2a4-a858f63cba09
  4 54774faf-3634-2f40-83ab-18fb8059c29d
  5 2e5ae516-c560-7a82-8a64-fe4050a21255
  6 f7a3fac4-0642-297c-8998-ad4b086da1c3
  7 53168d37-bd87-24c4-8c17-5edc9ecd4e23
  8 6e4d26a9-c37f-4313-ad9a-00a7ddb9d0f8
  9 a60a7b05-5a38-1dbf-903b-7adcf1919d3e
 10 fa8fa8f4-b9b0-6d57-b3cb-9b86222ecb00
 11 a8da9ceb-ed15-1456-ae0f-379c5240dce8
 12 a238a8e8-8b59-41c8-9f6e-91eba36dbe20
 13 3703d592-e734-0773-a93b-95e8200db469
 14 826284a1-2ae7-42e0-84af-a0584ec32f46
 15 6eb5c71a-e098-84fd-9c7b-3ba08e198d9f
 16 6a5b88ef-f120-299e-8842-28eac97c26f5
 17 434bbc9b-53f6-7097-9d4a-b37b2eb7286a
 18 4b3452d8-a1b1-810f-be7a-3c3b388b0032
 19 f700d3a0-9c10-0de8-9ca0-721820fe370a
 20 dd496b68-10b5-633d-b697-31b682708734
 21 8aa2158b-129e-4b91-97f4-95ce715e7d66
 22 9f89ee4f-dadd-1673-a33c-8d9b22de2aea
 23 baefccb6-9176-3ede-ad5a-f6ee15f52b8f
 24 ecce9021-0186-4f33-8652-0b2ea257d5a4
 25 3bf2742a-11f5-5363-9b01-af2a784edac7
 26 ff6e892c-01a0-6925-896e-0f15ed7d9a62
 27 936fd632-f6d0-8582-be56-444a48685e9e
 28 efe607c2-a793-64c2-9d0f-4a7c28cbdebe
 29 edfcc077-4104-3383-8c40-905d888d4187
 30 8ddcaaa0-fd44-3281-a1d3-21e3dbf0706e
 31 89711ff6-7531-50fe-90af-10241334d80f
 32 ee1fd147-fcea-5e22-805b-e74dba8505c1
 33 8d4e0b45-b42a-3a9a-9ec8-87a3dcb3d370
 34 e90f41a2-1c55-2216-a5da-826e36afbdc5

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7462722416140482780641345686335532. Exactly this sequence comes out of new Random(50).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 0 of Run 27 (seed 1,337,299,625): new Random(1337299625), Next(8,64) per post. The RNG predicts N = 34; the post has N = 34 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:07–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results