A858DE45F56D9BC9 archive

201208310656 z3n3g

explained decrypted filler

3DES(name+title) ECB, 40 GUIDs, seed 188

Metadata

Post ID
z3n3g
Title
201208310656 → 2012-08-31 06:56 on A858's clock
Posted (UTC)
2012-08-30 21:56:04
Timezone
UTC+9 · title 06:56 against posted 21:56 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208310656) = 1ff8adea28f4019063e69a1ab206f6fb (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
40
Filler GUID seed
new Random(188).Next(9) ✓ verified
Run
Run 27 (seed 1,337,299,625) (seed)
Draw
3 · predicted N = 40 ✓
Machine boot
2012-08-15 10:07–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
11 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208310656 (name+title). Key = MD5(password) = 1ff8adea28f4019063e69a1ab206f6fb, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 873871bf-e41d-8401-8f6d-413ace7c5349
  2 b2828311-7f46-8fad-848b-99d1c52f2664
  3 f8ddd2cf-1bb2-1ee4-8803-ba645cafc392
  4 bd7819e9-4294-6447-9731-803f6c204d15
  5 87777575-43a0-0982-8c34-59fad027634f
  6 57ce821b-8aaf-77e0-81f2-adda15cd58d4
  7 69dde13e-9ccf-116e-b619-b5c65aaf9b96
  8 edead3db-507d-6fbd-a204-8c633c45b83f
  9 f4deb84f-e337-2493-8b96-7fb525ae728e
 10 7fca40c5-5c21-5c67-b746-60964f396f1d
 11 df33a580-551c-730b-91f0-ef0c3801dca8
 12 2a4640a4-0c40-2708-b796-f3c28820e420
 13 ca43b295-8da1-7c35-bef4-7b77b98904bd
 14 6cacd3a4-47aa-2c4c-980a-2767b491de9d
 15 985dc5e5-40fb-5e1b-ac1d-6047d702cc54
 16 09fa6c88-9a33-3320-b903-ff567b16232d
 17 b004c54d-13a8-8dcd-a3b4-34d71a7aedba
 18 63559f8d-5572-41a2-9c95-2587f63e81bd
 19 678c1dbd-8200-6f61-a6a1-5377145ff048
 20 a241743c-9398-09c2-9662-31d43881fa31
 21 7a048fb7-b972-7ef6-9e0f-7013086f4dc6
 22 1096e482-c2c6-8ff6-97d2-e5740c86956e
 23 9e546e3d-295e-6ad2-b41a-a932d99bce9f
 24 8e84ddbe-bb15-6914-a3ac-f2d26a16a5ea
 25 c47161b6-7ae1-1798-8dc1-26b182fdd682
 26 49204742-e9ac-4654-99e6-3ab716280b9e
 27 3b67f72e-b0e3-5b20-912c-62678f4afb05
 28 b8b8477a-2477-1eaf-a6c0-0720586d9aa2
 29 bad75a3e-2dee-4450-b31e-8115d0dac54c
 30 36eed84f-ca16-4294-ab11-ba5cb2558b0c
 31 cb9f5397-154b-52d0-8a1d-604be0e0711e
 32 eefccf5e-7b1d-801f-beac-b232c6643d95
 33 33d14f41-66f9-8808-af73-8d3e1fb9fc77
 34 4740257e-7d36-62b0-9ade-7cfec44d6d2f
 35 bb87d28e-a4c9-27bc-8478-ff11c822844c
 36 705a654f-5210-87ad-98b6-1afb0e0e0eb5
 37 8a8a0708-627b-68b8-97e3-87aa2a26c4e1
 38 3a5f1262-24d1-40c6-9562-cced58b7f4bb
 39 426fcde6-e432-4971-bdfa-48bfe5c70213
 40 70d8c679-91ca-6885-b4d8-b021d9ec4375

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8816071625727253846078661451445886286446. Exactly this sequence comes out of new Random(188).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 3 of Run 27 (seed 1,337,299,625): new Random(1337299625), Next(8,64) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:07–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results