A858DE45F56D9BC9 archive

201209231304 10cild

explained decrypted filler

3DES(name+title) ECB, 29 GUIDs, seed 84

Metadata

Post ID
10cild
Title
201209231304 → 2012-09-23 13:04 on A858's clock
Posted (UTC)
2012-09-23 17:04:07
Timezone
UTC−4 · title 13:04 against posted 17:04 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,872 hex characters · 936 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209231304) = ecc7d8509e5e0c373c299c2a23cd8d06 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
29
Filler GUID seed
new Random(84).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
22 · predicted N = 29 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

4D2DCB6822CF3C10 E6DC1128E45924E6 DAB4B3179023BC41 4AFB08C03B5F04B2 2928A02FE56FE16A 20A907AF41E7D09C 7E42895939B40025 4B693462B8A25807 5AF072FE39CD62D4 A123F7F4A3192F7F A52B21EA6B542ED1 7D3CE1E79A5E3649 DC11625BBD701544 1DDB8893D46F9309 1707A72D802A5219 1EC3195059E124DF C06898F4F999CF8C 5483E0DF14822ED1 643324E19A7CFAF6 D56613CDA87DA19D FC54D9A82B9DAB5D 0289E76C1B27624B 26F664550207E314 D625A31E0C8212B6 675E4095C19B5DE2 718D2195D2A3F417 7105A457301C5569 5FA25706AC40F76B C9E6D2DD949A2E54 30BF82C2E8B32935 ABB7421FFB1428D8 1A8C8D6D5B25EC06 E261C35D937E56EA 390AFD24BE525EF7 E3B540F075E9E65F 1E9F0622D90EAD00 99308DE71525278B 79062D029D608AE2 7F42D4E03A1153B8 99CC4E262CE0334A E8073651140FC870 FB98C5FF3CDD399A 3CCA693FE4C32D8F BF6D1853C9298C2E 2498CA031CC6F61F E68C01FF47AF44DA A97F507C2B5431F3 0AC79594F26CE4AB 3AF32CAA8FF733F9 063AF78364071282 A1ED8CA3A060662E 9D09F9904C6BBFC3 93F8CB532CE249E6 805A3EDA02AC7282 C792AD01DB6190A7 C872543E9D451E89 1D339E9A6230694D ED551DBD76CB51D0 886C6CE605DB1C27 5E269341F11C0E31 AB7D855DE5F5115D 1376CB301EA6DF41 2AD3DCBB8DE9A02A 7488661E4BAA3DE2 580302E59CF5E844 2516B209280724BD F26DA499CE3A096C F63044F0274E25EC 7A096EB919254CD2 2BAAC1865682EAC7 FAAE8C5D9A44095A ADA14EF99E830873 A374FF24C850E576 55A1C0CAFA18BFA7 8568A70022C513A8 9642F1A317226909 F481C94DF5B4E602 2880859D671FEF20 32DD84C6F944CA7E 0232A9E7D960E6B1 FE89425AEA206A99 37BB55E855500BA4 8BE2E753375A0078 0F0FEFC8660C1793 082155C60BFAD8DE 55F629F643CEEC1E 9E3FD5E2F812AC73 0BD6C4D34F4EE36F C16A2376049E09A7 8495199D307FEFB3 2C89229FDB2351B3 F9CBF3C99FC908E2 07FEF3EFE0F16368 BB28A413736DE7E8 32CC202C1E2EF82D 055CBB866A2CAFB6 C6928005111CBAFF 1E75EB23964225E4 460DCACA5C7739EC CBD5A2FB26D90481 5114EEFD0D447643 C72B6A2221090A0D 270888F388D9A804 6D64FC72DA8B89C2 E2BEA533FFB2C1C4 ACA094308C2EF1D7 0B1E94C174E114CC 3D13C4B147CB8C8F 61F689A0DB363394 783669F34BB15584 C40E42514D8A4D6F FB67B892AD8A4047 C9330D23E4C768F9 D767CF3CBFE5F01A 658302055116E43C 8743E33C8040EE5E 97EBEC38248109E5
  • Read the ciphertext. Strip whitespace: 1,872 hex characters = 936 bytes = 117 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209231304 (name+title). Key = MD5(password) = ecc7d8509e5e0c373c299c2a23cd8d06, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 29 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e7f495e8-7f7b-5622-80b7-a5c48d5ef736
  2 adee067c-36cc-4081-98f1-74eaa2415dec
  3 cf239fc2-ff74-4b64-8882-96f07b3b3667
  4 1afd617d-3fde-40b8-834d-1c62e6d8291e
  5 232dc832-dede-1a7d-9153-b56d0cd4c3e5
  6 e5a144fa-1032-8c19-8d64-247782cadb3e
  7 4913e09e-9a82-4e46-a982-849d95ac78f8
  8 d0a72c67-a4c0-5da8-a75a-02d0da264c48
  9 fc5e8c16-0f1d-381c-8e86-5f4a510e08d2
 10 70ab77ed-ad9d-20d0-8352-b7dedb865070
 11 2074b3af-f118-100b-a501-36bbd1074c8f
 12 6ca3f68e-7e99-065f-9c4c-aef4d747d740
 13 7b236ba0-696c-3209-aabd-21e52297bbb9
 14 03ca14ce-ce32-136f-b2b2-22ce26e3c0a0
 15 db3728ee-7b03-72dc-a3e0-04ccf193830f
 16 4fca5443-763c-4906-b780-946f0353218b
 17 9cabdcdc-e86a-1d69-89be-92a609734061
 18 2532ff2c-7ee1-037f-aff5-ecf9d1bce407
 19 77ddc917-7201-86f6-b0ce-291080aaef1a
 20 c947eadf-d3c3-77d9-903c-e97adcb1e53b
 21 ba16b91c-133f-862a-924b-20b63742d3f3
 22 08edf49a-d41f-484b-9533-3f0d674ab543
 23 ddc2af22-ba84-14b5-83b7-3e5c04af41c7
 24 f2596428-7818-3203-a358-527b68d71be4
 25 e8f7f9be-baf4-82a1-adb5-d99535d009a7
 26 04363e6d-5ace-47f2-affc-d596d19f7fa3
 27 88fac0ea-a376-1d49-b0b4-da5deee30f77
 28 071aab9b-d849-6bba-80c5-aefc22e897b2
 29 9a4d0cbe-b369-63dc-b437-630256031721

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 54441845321031741087841384166. Exactly this sequence comes out of new Random(84).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 22 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 29; the post has N = 29 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results