A858DE45F56D9BC9 archive

201208310423 z4kbf

explained decrypted filler

3DES(name+title) ECB, 27 GUIDs, seed 45

Metadata

Post ID
z4kbf
Title
201208310423 → 2012-08-31 04:23 on A858's clock
Posted (UTC)
2012-08-31 08:23:16
Timezone
UTC−4 · title 04:23 against posted 08:23 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,744 hex characters · 872 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208310423) = 6952ef7380c21c694f93cff75390b3a9 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
27
Filler GUID seed
new Random(45).Next(9) ✓ verified
Run
Run 27 (seed 1,337,299,625) (seed)
Draw
19 · predicted N = 27 ✓
Machine boot
2012-08-15 10:07–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 1,744 hex characters = 872 bytes = 109 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208310423 (name+title). Key = MD5(password) = 6952ef7380c21c694f93cff75390b3a9, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 27 GUIDs as hex (shown below).

Decrypted: GUID list

  1 053cef93-2b06-2457-b986-258217d1af85
  2 a55e809a-8acf-03ee-92c9-a2d7db12898b
  3 ae1d8879-b37b-2381-94bf-350eca98569d
  4 0a6ae215-3e8a-1d6d-813d-ecf9b6bb073d
  5 efbe0b34-8304-4336-a6db-36f44ab88605
  6 e57693d9-8665-7353-895d-4a68493e9848
  7 4c23ca82-8e6c-0d8f-ace9-60220a802ca4
  8 900718d7-d666-0b86-9b38-a3d131569746
  9 812f6b6f-61ae-4fe9-b349-04a2c425c6e8
 10 509888ff-05b4-79ad-91a2-284b2821ed04
 11 679dc578-9d2b-4403-8c51-870593717169
 12 ed7d17e4-3918-534f-8585-156b4e7c9f23
 13 4c6ae880-f3a1-5f79-b2ec-51a3a63675fe
 14 9a79e6a0-f061-740e-a9f5-08144ed6ea10
 15 a920021c-a9cc-4ab1-8856-d83359be1a2c
 16 c565ba97-ced6-1e3e-9b99-e6d5efa327f4
 17 c1f5b379-2086-7c4d-a7a6-441d91fcb7d0
 18 a65a3332-f42d-89c3-b415-e1f9433cc425
 19 4df91ee3-740a-820c-9c02-08972b1c3244
 20 459acc3e-6258-6fe2-a61d-17e184e6b96d
 21 cb746e2a-7d68-7270-9634-96fc3403f361
 22 7f02939f-c308-7f35-a43b-ef98a584b07c
 23 a589f372-407a-52ca-82e0-c1a7a9ce6c75
 24 08ac79ba-bc80-6695-94b1-4bcbafd3182e
 25 a981f2eb-4913-0a13-b343-493a62c9d274
 26 3b19d14e-dd1b-47aa-9846-35cdc75bf233
 27 13b0a349-eb59-56d7-9d35-be172a4a3070

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 202147004745574178867756045. Exactly this sequence comes out of new Random(45).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 19 of Run 27 (seed 1,337,299,625): new Random(1337299625), Next(8,64) per post. The RNG predicts N = 27; the post has N = 27 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:07–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results