A858DE45F56D9BC9 archive

201209010743 z5r4j

explained decrypted filler

3DES(name+title) ECB, 41 GUIDs, seed 37

Metadata

Post ID
z5r4j
Title
201209010743 → 2012-09-01 07:43 on A858's clock
Posted (UTC)
2012-08-31 22:43:07
Timezone
UTC+9 · title 07:43 against posted 22:43 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,640 hex characters · 1,320 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209010743) = 091e4e2843c3c131056e74a8d99f75a8 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
41
Filler GUID seed
new Random(37).Next(9) ✓ verified
Run
Run 27 (seed 1,337,299,625) (seed)
Draw
26 · predicted N = 41 ✓
Machine boot
2012-08-15 10:07–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,640 hex characters = 1,320 bytes = 165 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209010743 (name+title). Key = MD5(password) = 091e4e2843c3c131056e74a8d99f75a8, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 41 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e2cbd77c-15af-0a1f-980a-f73f6a998003
  2 b234823d-1c24-690a-81d5-bca90d08b11f
  3 b798ba5a-a8e6-54f7-b653-2fcb05dda125
  4 644866e9-0885-4abc-89f8-090d4f9c2833
  5 db97037a-8878-8b52-b007-fe7a37a008f2
  6 39c188ce-fe44-89ba-bf07-f75ebd275d2c
  7 e44d0713-693c-490a-95e1-a266bc9919cd
  8 1f023437-5389-0788-a7f5-3289cfa89854
  9 03b7b6c8-22dd-4eab-bacb-c168e36de02a
 10 d430bdfc-1922-8a5a-a734-ed9dda16ca3e
 11 25aa7695-9e22-4432-b2d7-a0f33367f6ef
 12 232ec39a-2431-3418-8d7d-106c2bbe24eb
 13 52af42e8-02a5-0f02-a5c3-d6254659609d
 14 2191ae10-ee88-6b80-81a8-4d5b56903d96
 15 470d6b08-88f6-7185-8f17-9bc0da17b89b
 16 02920f87-2985-1415-acb2-f4d0a38baa05
 17 d94c9e45-e180-30bc-be08-2c4461bcb226
 18 5a394acd-49eb-8282-8504-db6f1b0cbab7
 19 8d25b516-90d1-6911-971d-b925dc660e97
 20 7fa15657-f5ea-5626-ba79-8d355b610c71
 21 8037bbf3-d1c5-67e1-a403-c185a968f6f6
 22 64fb0644-8ea8-8b4d-b5d3-329390ecb3ca
 23 3eea772e-1af7-2b5d-853a-b0e7fe8e089b
 24 5197ce6b-64e1-8b85-958e-8be11a998cee
 25 7f23ee90-f983-2d88-b631-fe9f47385db5
 26 749ea77d-dab6-262d-a7a5-f8a79856429d
 27 4523f6a0-e6cd-613c-904c-eb9973edf48a
 28 c3198902-8f8c-533a-b983-5592439fb044
 29 b3fc7995-ffed-660f-a1df-e76440d776aa
 30 bbd26ebd-d579-77b9-baf3-ebc8c353a706
 31 002ce06a-1402-7b54-ac70-bc6d6c9f4542
 32 9f86fe91-96c1-13f3-b33a-13ecc0c2a46d
 33 c594679c-96c9-1829-ad27-7f0746d82320
 34 1663e26c-efef-88fd-9019-5925a74466d5
 35 388f2fef-2d03-5938-9484-2781afde8ddf
 36 16a10aea-9236-38cf-b884-6014f06808f7
 37 113fac63-7104-6bd9-af69-61e80fac3511
 38 72d15496-b641-52c9-873b-5a6e70081fd2
 39 1ca106d5-cf84-60e1-9c95-f13c961b5163
 40 37766210-5000-8a10-b587-e461fbdc1c75
 41 1712460e-6672-8b45-865a-be1b2ce2929d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 06548840484306713865682822656771185365688. Exactly this sequence comes out of new Random(37).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 26 of Run 27 (seed 1,337,299,625): new Random(1337299625), Next(8,64) per post. The RNG predicts N = 41; the post has N = 41 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:07–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results