A858DE45F56D9BC9 archive

201208310258 z4hqv

explained decrypted filler

3DES(name+title) ECB, 37 GUIDs, seed 297

Metadata

Post ID
z4hqv
Title
201208310258 → 2012-08-31 02:58 on A858's clock
Posted (UTC)
2012-08-31 06:58:11
Timezone
UTC−4 · title 02:58 against posted 06:58 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,384 hex characters · 1,192 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208310258) = 7dced1b4b3f903609857103881330152 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
37
Filler GUID seed
new Random(297).Next(9) ✓ verified
Run
Run 27 (seed 1,337,299,625) (seed)
Draw
14 · predicted N = 37 ✓
Machine boot
2012-08-15 10:07–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,384 hex characters = 1,192 bytes = 149 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208310258 (name+title). Key = MD5(password) = 7dced1b4b3f903609857103881330152, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 37 GUIDs as hex (shown below).

Decrypted: GUID list

  1 037f565e-ad18-7f45-bb82-256e4e60c1ce
  2 1c93427a-5833-8d87-b5a1-c266fbeda146
  3 3991108b-3afc-303e-9486-1f1a76d692a5
  4 9c527d02-a978-8f8b-9332-c34eff8b8816
  5 d22e46f9-4f46-2db0-8b68-843c252b83e9
  6 9995a7b9-0eac-018b-913e-fd41aac6e95f
  7 b901b12a-2f8e-8400-8474-dc8c782aa67b
  8 aa90ce78-d324-35b2-bda0-68772f8c8e43
  9 5dcbf471-301b-674e-b318-da757cb95322
 10 da5246db-e600-719f-815c-3ae19aeb879b
 11 159d88c5-574e-0906-a876-518e46e2037c
 12 b260e65e-2141-3f0b-8483-2af583357078
 13 3a0f5f28-3481-731d-a781-44a579921a17
 14 31b13c18-f9fe-8ae8-881e-cbcc7603db24
 15 44f8668d-1c62-7134-8a7b-9263305eee31
 16 01f1077e-f63a-4922-93c0-febb466091e6
 17 ab215023-3cee-6f93-a7cc-693d24969bcb
 18 8024b09b-1f99-1089-b6a1-a43167779396
 19 a21baf58-2cf1-625c-b645-ad5821f51e91
 20 63f982e9-f004-2ede-aa54-b7b66c44a71f
 21 bd35aeee-6d73-2752-a345-b9b26c5a8ab9
 22 51e3099d-ff51-645f-b8b1-00c709a4a4e0
 23 d6d4b312-a1b8-107e-b443-749fb5ab6169
 24 5e687fd2-8cc4-7236-a914-f7251cab245e
 25 332f8234-c924-7c25-b93d-3a5d8bd29626
 26 211fdfa8-556d-40e2-8d54-b2cd8d33c064
 27 f4f93a7f-4290-26b8-baf7-675a360f7a9e
 28 f0972840-0e40-6156-937d-0a56438f3bd3
 29 ee7582e7-ff25-5491-9bd3-3ebe057dccea
 30 14268f34-c533-20a5-99de-c3d1582d1dbd
 31 ed726cab-b8dc-77ba-9937-dd223d667abe
 32 838afbed-b340-6b81-8de8-89524168ccd4
 33 b8bf754f-a54c-667b-956f-a4ee2adaff61
 34 785bd962-685c-307d-875b-8530c62563a1
 35 c2e4e3a9-1a38-3555-8765-83121c9038fa
 36 57ff442e-7b68-5818-b7f9-5cf470dbcc3e
 37 0369e01c-ed4d-00e8-b537-6c65943e1b38

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7838208367037874616226177426527663350. Exactly this sequence comes out of new Random(297).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 14 of Run 27 (seed 1,337,299,625): new Random(1337299625), Next(8,64) per post. The RNG predicts N = 37; the post has N = 37 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:07–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results