A858DE45F56D9BC9 archive

201208310349 z4jbb

explained decrypted filler

3DES(name+title) ECB, 39 GUIDs, seed 396

Metadata

Post ID
z4jbb
Title
201208310349 → 2012-08-31 03:49 on A858's clock
Posted (UTC)
2012-08-31 07:49:14
Timezone
UTC−4 · title 03:49 against posted 07:49 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,512 hex characters · 1,256 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208310349) = 2f317bb1b34747901964176f8d34ed19 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
39
Filler GUID seed
new Random(396).Next(9) ✓ verified
Run
Run 27 (seed 1,337,299,625) (seed)
Draw
17 · predicted N = 39 ✓
Machine boot
2012-08-15 10:07–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,512 hex characters = 1,256 bytes = 157 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208310349 (name+title). Key = MD5(password) = 2f317bb1b34747901964176f8d34ed19, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 39 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e0bf5233-1def-5286-8b8e-2394df8991fc
  2 c580c890-2721-0a27-9ee3-19d03111d83c
  3 b27f0809-1667-556a-a793-8e661495b164
  4 d7ab5154-aad8-0854-8e0c-d8528c64385a
  5 79899cb1-0de1-8f93-b280-6be278027b10
  6 ff770922-a724-57b2-96f1-f92a8323e039
  7 c321ddac-be16-388a-980c-52280bcb94a8
  8 43db2b48-07e4-0b21-8bd0-efb9908f7517
  9 e804db47-dcf8-81f6-9bc4-f08179b3547e
 10 f5aa9fbf-0654-2193-bdea-01e9fee12c15
 11 7ae36634-bb7d-04cb-9832-5d84c1fa1cb8
 12 f0708157-20c1-5e7a-8d3f-c3be0a9425da
 13 6f43502e-dcda-7c0c-bd5d-40ed9d525015
 14 64391372-5fb4-4482-ba70-01514d2a524d
 15 06a8ebff-8476-10a1-8f02-16e6db22e721
 16 c3b87ba0-d160-372f-8228-95bf4683628b
 17 fbfeaefb-54d3-2257-8dc2-dce6f56faf95
 18 47c6dd5b-21d7-44bf-8857-606a48d49007
 19 04b167db-eeba-3b46-b295-546186ff32ed
 20 bb17f50c-382a-5eaf-913c-3e3fba47cb5e
 21 3508a8cc-2e74-33b9-a2e6-625b45315cbc
 22 97d08fd8-4f07-0097-b21c-5ca88cbfe46a
 23 180e5e11-2ea1-887b-8db7-756b078c0657
 24 d33fda97-2229-3bf6-a381-d4a8157ffb9b
 25 c3e1f893-553a-43fd-9e87-dc85225ee89b
 26 5db96886-669f-2f40-84dd-4c9b0a21d958
 27 f7abc565-88ed-3f7e-b1c8-cafc476a6602
 28 629f00ad-3bf1-0ba5-a213-3b964986e69c
 29 53db7b59-1114-826e-8363-f29899d49d3d
 30 d9c20152-7e62-0b89-95f7-c3550a829c96
 31 2d950b73-7831-382a-8958-a17d532fae7a
 32 b3960509-3d97-6090-a17d-1fa7f1a2c020
 33 a9f5bf02-0119-41ad-b28b-d4336d0e73ba
 34 f5e0f6fe-1f42-827f-8fb4-a7f6224dd61c
 35 facbe9b8-174b-8cf6-a265-ad71310ac5ee
 36 aa587026-3c22-8d0d-9faa-4bacb4bd217a
 37 a1a4fde0-60a3-0014-b910-cbd2a4666840
 38 036c980c-1190-2fe7-a1db-565bedbccb3b
 39 e2aaac65-9c39-1838-8bdf-58e663bff7c3

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 505085308205741324353083423080364888021. Exactly this sequence comes out of new Random(396).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 17 of Run 27 (seed 1,337,299,625): new Random(1337299625), Next(8,64) per post. The RNG predicts N = 39; the post has N = 39 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:07–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results