A858DE45F56D9BC9 archive

201209010652 z5oa5

explained decrypted filler

3DES(name+title) ECB, 33 GUIDs, seed 278

Metadata

Post ID
z5oa5
Title
201209010652 → 2012-09-01 06:52 on A858's clock
Posted (UTC)
2012-08-31 21:52:02
Timezone
UTC+9 · title 06:52 against posted 21:52 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209010652) = 74851461b7846c119694ba5072bae7fa (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
33
Filler GUID seed
new Random(278).Next(9) ✓ verified
Run
Run 27 (seed 1,337,299,625) (seed)
Draw
23 · predicted N = 33 ✓
Machine boot
2012-08-15 10:07–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
15 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209010652 (name+title). Key = MD5(password) = 74851461b7846c119694ba5072bae7fa, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c3bb66c2-2564-805f-884c-23493aed2808
  2 db52edca-2fd7-3d78-9369-ee960bdd994f
  3 d6031e46-77dd-0a1e-9f6a-edc5ae907b22
  4 1c8bdb13-fcf3-8fbf-8451-ff4601613df4
  5 359878f4-8563-67d9-bc52-1f7db9a2eb52
  6 1717cd37-9b46-4f23-9f88-f56cf67c7ace
  7 af592272-5211-4e0b-a121-f675aa8bfe55
  8 b62b4868-8330-863c-9bb2-2de77a6a03aa
  9 2b0e41c9-087e-3511-87cb-6c88295d31e4
 10 aed37e99-193c-7373-b49f-f23d9e252a41
 11 49f7ac22-05ba-04c4-bb73-f842052a824e
 12 70347e05-a13c-4091-82ea-7e40bd71d86c
 13 cbbe442c-1f13-6887-a44e-a239ce5aaf7a
 14 1f873111-17f4-0435-a400-2913e0b93756
 15 b7436c4a-984e-5044-aca6-e5e79d7218e7
 16 23c63204-97bb-5a7e-8e59-4a3b6d6bcaf2
 17 9429a93b-06e5-649c-949b-8ea3a1e8fa2e
 18 1c152e4c-64fe-3e1f-9058-cc823ff933b8
 19 0c097adc-d315-18fb-a319-454cb38636b9
 20 a9ddd69e-1a49-80df-8f0d-d90203d32df0
 21 07dd0436-a11a-6af6-b313-15862cf09519
 22 d3d9893c-8620-02d1-96fc-b4c6644de089
 23 f5c00af7-fbb0-8b68-923a-345df7aa205f
 24 54096024-849c-13d7-aa84-025a3fda9fc7
 25 b376ece6-9676-872e-8d89-705b9093ebfb
 26 c24d3cfc-ca48-28a5-b85a-5cdc75750dec
 27 5ad3339e-1683-8656-bba7-d5ff8f0a4e76
 28 3cd49354-67ef-8b65-a31c-db02322ca506
 29 316bbc93-ec83-37ad-8dfc-acde8700fdde
 30 25906a2f-0a4f-8a98-8de0-e098c3cfe6fb
 31 306a8942-dc6d-7b67-a5a6-5d9c62a9422c
 32 a2d821a9-66db-6612-9168-d7f148a0bb41
 33 0832fa38-1e0e-05ae-8a25-7610c5699baf

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 830864483704605563186081828838760. Exactly this sequence comes out of new Random(278).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 23 of Run 27 (seed 1,337,299,625): new Random(1337299625), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:07–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results