A858DE45F56D9BC9 archive

201209231339 10ckis

explained decrypted filler

3DES(name+title) ECB, 29 GUIDs, seed 78

Metadata

Post ID
10ckis
Title
201209231339 → 2012-09-23 13:39 on A858's clock
Posted (UTC)
2012-09-23 17:39:34
Timezone
UTC−4 · title 13:39 against posted 17:39 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,872 hex characters · 936 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209231339) = 59cfe8eefdd7d5b7393b6d348b25afd1 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
29
Filler GUID seed
new Random(78).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
57 · predicted N = 29 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

543F3F3A73B39062 9A9529F62F7D1148 33016007B2A98E7F 3DF2B2A48F268821 32E992874C7A3B1E 96E272B454F22208 6A71134ADFAD40AA A73A2047B866B848 0B45166913A1A346 8BA0D18AC11A24D1 9C2272FEFD32A593 58A5C03E5EF43A00 5AC1834C84C89830 12C293E7F5C97DF5 E5208C4EE3FFDDF8 FE1B4379FA811126 E37A4D4926566C33 DFAD5BCC782F8C95 26804B838B0D0CD9 AA7F5987EC60B6E9 FE9C43FACA7FDCC2 E89FD857FDFDF357 9EDC9ABB87CE5E8F B6A0BB4C3F237E7B C92AB67A3485C17D 90DF0ECE88721993 D1D9A53B2153C3EC C20279C82959BA7A 262D511CD425E1E2 53E9E579E086F66D 9DFA5B03B2BF4D3E 7195F7D6C2F87D1E 57E234F46DC0AE7E F9835996341D3E5B 80DEE06B9715F0A4 F148D2FDEF3E3583 28055BF2A3432EF6 A6F0287F9CA2E521 18E6E96FC2271F05 F41E78398C9E8968 9761AD83BC35C1BC EA4BDAAB2CDDD24E 7E9D170FAB69B158 4CE3042B18E8A5A4 B3F01513FD57A488 5C31FE4D491404FC 04FD50E42063DBE8 E468DAEDFF623560 BEF006330CC82A47 55F99C7CBB86C720 4E6BE49363E6488A 911D6CBC52664AF0 42795DBE5CBF9FEA 74205AACB9A7BFE3 ED5D8CC14CE44C6F A2D5AEF844E7C4F0 25A3181D6F0EB174 BBE7FAA4E7B08F15 7783CB9765CDDD27 1E72442DBF1EB6A4 3EBA910657235334 A048AF5B9D19064D DC606EE75F31894E F958895868E81291 BA50C76DF9F8DEAC 1FD9A10E6DB4F722 2D98D1FFDD3ED557 7D47F4C32A1D17A6 172CD14A7091FE47 9DD3E61BAB3219C6 4CD7A3C1D443A46D 87894B9D22C730B2 8B35AA505A458DF9 871662AB320E64BA F43BE882930A9F42 7184F76FC79CA358 70DE7F87800D176B 64C985665FD53986 3DF79E1D6361406C D508A3722CC539CE DDC42B33BB895BD3 9B5BB48F1139EBBE 9F6A1EEA4040782F 088F0F5AC3FBA1BF F1B251A3C3579D39 5A29BDD3440DB813 6CFD81A6A41A47EA D2EDF8E02144FACC 19C64BC4E2D66499 B249A06A5CEF4E51 94BA001AD7FC828C 7086A22D2E535D10 3FA41BA605A2BE62 47FF6D40EBD1447E 46F274596F8E4068 748D0F107383FDBA C8F7BF67296DCAAF 6EBB7C9A14459049 C2F9C6EEEB6107F8 113D560F25C7A143 C7F2B29DB0CA4868 F0145076C525864B 0259BBAD57027945 C2A880CA86E37118 DEAE89063EBF067E F0DB6909F94488AF 04D9983FE7A339C8 E7020C05F714C58D 93323C0E1960277D AC0F55E181250428 41D5921CE9C7F395 C3E1C01B0D9010E5 19212629DED37F12 E4831E8B8B623329 E38B3126B68094E5 2F38219FA0406FF2 FFE3E26E0E922EE7
  • Read the ciphertext. Strip whitespace: 1,872 hex characters = 936 bytes = 117 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209231339 (name+title). Key = MD5(password) = 59cfe8eefdd7d5b7393b6d348b25afd1, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 29 GUIDs as hex (shown below).

Decrypted: GUID list

  1 033d2f6a-f530-4da9-860c-2fa079e52942
  2 6751d384-da62-691a-a43d-43da066d86ec
  3 2cfe354a-6b42-25c3-ac1a-a70a46facaf4
  4 7cb5068f-c12a-1a98-b697-22702df77d6e
  5 3b60d4f5-e338-3ec1-9db1-8f83c2a7ec44
  6 fa82bdd0-9995-6b7d-a6e8-af1fb95db976
  7 65377420-f52a-788f-b61e-7097ada452e4
  8 9e259ec3-26f4-52e8-aeb0-d507bd3f9193
  9 638aaa7f-8fde-53a5-be03-6218dc9b4125
 10 f94ce41b-8b2a-03c1-bae6-c4ee5b5314f3
 11 d130f447-610c-6cdb-97f5-fd20c9c8878f
 12 0ca76e91-2425-3999-8dd0-c192207485df
 13 2cb9dd6f-774f-23cd-a3f3-a81b62ce1d88
 14 6608ebc3-3e03-0d3e-a92a-dc774062b70d
 15 05607a29-5abc-5213-9282-bf607aca64b0
 16 6387494c-9815-6fa1-b320-fb712efa77c9
 17 69c5eab6-689d-58e5-b227-97bfcce92451
 18 9a53cdcf-237e-338b-94ea-1fffe047fa71
 19 2db400f9-79fa-7a63-a196-d9df73008e07
 20 2a200713-7527-4cc5-8d06-bcadc76e2314
 21 250d6165-ef44-192a-8ec5-7a2b9b083207
 22 963fcd08-9ad5-8337-9d51-f9b53a28b961
 23 39eb92fa-6e2a-179c-a7d1-20163fe5b464
 24 5475e01d-e8ac-2478-b81d-3e8269cb8a38
 25 b5ed32fd-b490-39f0-a564-af9c5b28d05b
 26 d1b55978-db56-60d5-af9e-bcfae86e5e60
 27 2a8c380e-834d-84bb-9a3d-0337c9234ce1
 28 829b6dbd-1770-01eb-a676-97b2e6358485
 29 48c84d9e-e29f-0e31-92bf-cfe5fb076190

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 46213675506320565374181236800. Exactly this sequence comes out of new Random(78).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 57 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 29; the post has N = 29 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results