A858DE45F56D9BC9 archive

201209231328 10cjxb

explained decrypted filler

3DES(name+title) ECB, 26 GUIDs, seed 189

Metadata

Post ID
10cjxb
Title
201209231328 → 2012-09-23 13:28 on A858's clock
Posted (UTC)
2012-09-23 17:28:26
Timezone
UTC−4 · title 13:28 against posted 17:28 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,680 hex characters · 840 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209231328) = a9c01cfd5e87b3dcb9a3a7a8e89ee2d8 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
26
Filler GUID seed
new Random(189).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
46 · predicted N = 26 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

A69F1E1D06E3CE4B 64F19049F898C1B8 90C1228FE63E0C63 9F9FA4FA439F3910 DFEA27BF489C2468 169EECB7CC288D4B D4117FD5E4AA73A6 D15B4892A5BF5C66 7DC512F47EEBFF42 119D234451A66650 B2BEB3C4F282FAB1 38B61B3948AFE4DA 7034750B3F73504F E0763890A63EA569 2AD67215F18F2959 AB7C7E7E75B834BF 0B998B15B16F7B93 F3B2B9D11469C867 9C15EA78F34DDC12 9E6573E460E60337 49113CF84698AB0C 15E03F47DC6370A1 378F643EBFD3A268 B607B9947A197C80 1B26EDCFB18E6D16 74FD9D78F91D2DDF B19DD2F505E65EEC 84AE422A0983F1BA E8029ABEF69B4947 2AE60CDC5971FE15 2521833C9CAA8544 E90B82A3F0E67269 5127AFB410FD33E9 57193A98A4989521 F5428BEEF3B0FA62 5BCE844A69AA047D 3FFF946861569B33 5F187E894E609B48 7C693BD7A4C3FEAD 09043DBF7EAF09CF 32BA1FB27E2858F8 513E1795D0B87776 D584B6157CEF0F6B C28194FD05A2126A 88C786224798A0AA 76D2B7C7BD5003DA 7E40D67F961FAE48 C6D306BFA2467952 1A7E496CF9FDC664 79222524A0B86417 23229558CE394C1E 854FF90265286392 5FC583C9982A7A01 F15961A3098235ED 81498EDF01C7ACBE 2F65A6BC85827C37 7FB9260EA2AB607A 6FF4A4B7DC687219 E474535CB12E5E96 A5C198A8C5BAEDE6 60FDAF38191489BD 44946808A35FB88E ADBF113A1B55D176 EE55796F1FA257FF EBF6D7CACADA8A0D FD2B67DAFA069F16 7469789243C66A65 8E6B993E348F9E42 5295429363812710 7E6C56FEE6D09D87 A51A89071FB25C98 E80B390B882A9A7B 606A48BCC52FA3FB 98F1E07CE651D530 329D1288F0765CC0 628A4FDE3B835539 7736CC9F2137DC25 2EE239C05DB31F46 809EBB0AB4052984 A5AD783F7F59F26A 5B4E30AF3B11A123 0815AD99BBDA462B D8AC696CFFBBEA9C C82CBD5A410EC2C1 6EC6E1FFCEFC603F BAF48B86EA394579 6D4CE0CB0DA164A9 3CDB07B5BA848576 3F93CF63EA80FD24 6EDA0D8B8B53B9AD 18F2205D4E6BD944 707AF4FE49958DAD 374DC27D2146EA76 4F3DFB12F24E3708 54B628CC508D9F3D BEB6AE5E0AAEC5EF C0CE28425A0156DB 8060AF4230125FA3 371079979A38F162 84F4004374248E6A E8DFFEF3F56F6C27 44AEF54127CEDF29 3BD8382490B2A9C0 AE637D44C37857BD 3A69A08D6755611D
  • Read the ciphertext. Strip whitespace: 1,680 hex characters = 840 bytes = 105 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209231328 (name+title). Key = MD5(password) = a9c01cfd5e87b3dcb9a3a7a8e89ee2d8, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 26 GUIDs as hex (shown below).

Decrypted: GUID list

  1 78298432-f1fa-4348-8e79-f4fac6467578
  2 5531bd5c-82cd-2c1c-93c5-79e71e6131dc
  3 7f914b3f-62fb-70cf-a24b-e1cdfac4b015
  4 d2f73c44-6399-894d-85dc-82942250e149
  5 0d178d54-b1f6-4123-814c-ec4b462cac2f
  6 cdd96f90-c43f-6db4-8fa3-de21dabb2de0
  7 6ece2ccc-3250-53d7-832d-d788a3e4d29a
  8 2d2db347-e3c7-2c3d-964d-2e8b7164b81a
  9 aeedab38-6e1b-32d7-a564-97078493a5ec
 10 509a0e54-f27e-8db1-b695-ffdfce25dfe9
 11 d159bd54-25f7-4e7d-92e4-cb99e34f9eab
 12 e34f20e6-608f-0f4f-9fcb-5cc355f70f2f
 13 3cadbb39-0084-5ee2-a099-733346d522c6
 14 4e8688e5-4b59-7be8-911d-d5d32b9ba507
 15 ac2b2ada-b1d8-28bb-9ea2-4480b0e9ec80
 16 4ca2ed26-3e1c-0253-8a87-7605a31fe803
 17 28c3d9d1-e85e-2811-9b90-789e728540bc
 18 9654db0c-8e05-109a-bb28-6c7e8df31c9d
 19 625191ad-70a1-75be-a172-c0acb8de4681
 20 da43dd8d-4c87-4504-aa2c-f3c3f88ded0c
 21 ce1c9dee-9329-8eb7-94b0-bf2c8ad3303c
 22 ffa1960e-6c04-11b2-9f42-d5639d4f8b92
 23 09298fd8-944b-8835-965b-8fccb5b06db3
 24 557d7f73-7b19-0fd3-91bf-524d0aff3717
 25 0d0ceb55-b908-2b44-b598-3600703b3e8d
 26 e1d0c654-b305-0ac9-ad3f-e6f619cf3439

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 42784652384057202174818020. Exactly this sequence comes out of new Random(189).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 46 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 26; the post has N = 26 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results