A858DE45F56D9BC9 archive

201209231343 10ckqj

explained decrypted filler

3DES(name+title) ECB, 40 GUIDs, seed 659

Metadata

Post ID
10ckqj
Title
201209231343 → 2012-09-23 13:43 on A858's clock
Posted (UTC)
2012-09-23 17:43:37
Timezone
UTC−4 · title 13:43 against posted 17:43 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209231343) = 9ead297ea1315ebac8b5c0bb1e785af5 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
40
Filler GUID seed
new Random(659).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
61 · predicted N = 40 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

AD9B630E56D7DF0F AFB07127964C65AA 3E61CEF897E648B2 32AB9D3DFF8669FB A9AB01763C7E0F34 F79411A0D953500D 4FF49B3BCCF3D314 3BD48B9D2DD67E4C 071900DB384190A0 A27CF0F10B39AEA2 ECAB17A03D0C7AD4 EF60DBD625702477 77DA279A7A989B44 DEEEF9B02BC1B6E3 B7B339858F5CDA8E 85A357052F09D2E3 7F4A9DE9ABF91E40 99166FD1D82969EA 41A83396576E8BF4 312303DB25E2B82F E6A2E5A275A9ED72 834A5FA50F1799E1 AB174FFFCC06CAEF FDCA7B76C7222457 30D529A8A7090998 ABCE2DF56DB1EBD0 95CFC22002FFE673 61AAD5F251EC87E4 EFB9824360D997D4 D2D61D51320C7000 AFE7CFCC756ED7A6 D6BF7D6ACBB05FCD CBD7FC3BE28302A6 936D1A9EA8D13629 77892B0AF148D61D 3BD7BFD5935E2B4A BF0AAEF282FCAA92 2A8BC926148A70F1 7B1B4136941648B7 8954F3BE7A2EE18E BD487E7D2950C179 8414A4794C027B75 A5D03FB5788EC648 FF0A9FCDC9161746 2ED31B6E8708CCAF 483D4CFDE46583E3 A4192E5C97AF4771 9DBBDC174727E34A 49225B04784C9675 C8DC5F33D4F040D3 635BF4148385EAC5 3DF8EE6931E92FCD C3129BE264B1A9E7 61D77B66555F7804 28A3B24F1D17D181 C59D5EA90DE289E1 63A2974A8FF7C921 8DC797F8EB1F5D85 7B335CE178B5E486 7E93FC8754F9BC89 83073AFDFCB11A4E DFDFC661EF7500DB B9379E55107C187E 1BC1A7FD95741EF2 E16A28A8378CF38F 9C0D6A2A73802CF9 834E1A5C8931F033 0B757689D77B204E 3A19ABCC3A4A6F3B DA599F01645D4B3F D50E98A97A3B2AE5 6A3F5D7DE846A396 76BDA0E458D37DA6 4099BA8705490534 302832D220A61CCE 9D8B76E0A1055F09 7FD0F0C8B2CD7150 8E9FCD81B8F17BA5 5974F05520A50F44 340346178E7B0A9E 049EF5524D6B8CE4 87CC91C596F20950 D6ABD3F83E32AC5A ECBECD6DF72FDC89 B651398F52DFA2CC BBD254BE34DD0816 CE6324753D7DECFE 3E3BAA9B5E6DF7A1 D3718A14AFB5036E 665A13B007B3B9ED 2DBE8A3CA6799FEE 067E199FE6538965 1977C4B767D43F78 05BEEF1A543382D3 8223EEE339C806C3 145A73219461B25C F811129F29E02707 B9ED00EDC7074218 E2F29FEC5784A8A9 9E182899AA3F69BF EDFDC61AEC3A2FB8 F35ECA2D33B4FA64 8471CD58E4DD207D 9D87C5A4D817AAE9 1156F28EFFE4CDF8 3183B1AE7432E5C4 C4F767F72AD3AFD1 8C8A90C245627FFC F5AD1C98C4A643EE 62FE6A036276C6BD 2CA03DF573B2210B 3A68ED589A16AB97 3BECC72AF701078F CDC3880A117E06D0 B5CD4013B10AFF86 3AA4B25AD1241155 49D3FF87FAD2F3A1 0E7D10A7DB11E0DE AC624FD752FF06FD 669E6BF1232849B0 FE0FC05C938B3BED FCDCFDB58D608AAF 49896C5EA063A2C2 193208691FB9213F BA36F899AA535881 51827BAE13525BAD C26B406F603F27D6 3CA018656F21DBB2 527F08895224CDAB 19DBFCE2390E1323 EB7FE7E078F3BEC3 480E761C1A4F3751 88854C46F592B941 D5912321E70B3E38 5C46D7FEDE399F9A E5ADE5FFC1943C8F 83FEC3790E9EBDE8 FE4AF2FD541CA381 79EEA8855EA30541 DB7D2414B49C611C B4B975A14E5BEB07 E848DAF791E6B819 32FA5F54BA7FB903 9B7A84A86BFA3C86 8497C1CDE33843E9 20B58CED7F7D9CCB 7EEE40BC9D684478 6FDBD1A5162E9F90 584DF267056C36BC DBB11B733A768D05 1D029F48AAD6B881 24E0141144777CFC 7F4409B3DED2C453 B368C0AE0C28EAC4 6499AB6744A6982A 515E3C5875E9A2AD 0FAAE501E44B79AA 7BFCF6787395F992 2DF674A2418C9B11 B2A3569741A736FE 0341D19769A563B4
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209231343 (name+title). Key = MD5(password) = 9ead297ea1315ebac8b5c0bb1e785af5, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3b337fb1-2945-066a-96d9-cb020e8c520e
  2 9965dfbd-87da-1fe2-95ba-99cd5e370909
  3 a9513867-5f6d-3356-8b69-d350ef59b092
  4 23b139c5-df74-1690-8217-f132e13bea3e
  5 1274e9a3-e6a8-614a-aa81-11d1dfcd02e8
  6 9a0c2227-8a36-4eb5-88b9-ae5d1f527079
  7 0084a3b6-3005-1376-9cf4-f711eabc2d15
  8 db3bdb6a-6dad-0868-94e1-b05b49fc753e
  9 6704f0bc-92d6-41cb-888d-acd14e6657a0
 10 7d3d284b-4f40-2565-8791-69365734d9c2
 11 83a5d0f9-c496-7ea0-9a0a-ae725a27378a
 12 c5409670-0d1c-8a3b-bf8d-445bf17e4d3b
 13 8b5973a7-7dba-59b7-b978-f02ee92171bb
 14 1c3432d7-d327-29b6-b2b5-3d9acc2b5f5e
 15 d63ba2b4-e3f7-22ab-9c30-889ae1002a88
 16 60a4fbad-52b5-5b8b-bdbb-601d546793e5
 17 f7a42444-210b-71fc-a1ce-210b5e04641f
 18 d7a5ff7b-98e3-5de1-a991-ab3851178cbb
 19 2f5ac8b7-f4f4-4012-ba51-063062027c24
 20 21117541-ca24-43e5-9b5a-07ef94b96ff4
 21 99a353f3-bd21-3373-ae24-204317076200
 22 e017c909-72f5-4b53-8da6-666efa14562c
 23 4cde7149-e4a0-344f-ad24-8cecad95dce9
 24 e91eff80-d138-287c-8c1d-ae0a15c7a80a
 25 f470116e-3084-225b-a28a-18b860136724
 26 931dcbd0-49c0-35eb-96f8-bc44e277cdc4
 27 6ded3879-b538-454d-9dc9-149e8b96e5d9
 28 8ec58bf2-3537-0d4a-9b78-5f999db9d86a
 29 fa61dfdd-3250-5b81-acdd-39ad032546ec
 30 88ce8cdf-a647-752d-a9c3-5774d83554dd
 31 6056f403-27e9-4d7e-956c-769f92ba24e8
 32 aba866c0-0577-0100-b3ec-9a95cd03b387
 33 63c7febe-b36a-29ed-95fd-e0a3117ef069
 34 d8de8f97-0e7f-451b-a92f-de6c8a73ea1f
 35 858a54fc-8741-6035-8779-1bdfc6fcda1b
 36 092a3d30-01ad-2f59-9794-0fad196bf904
 37 12aacb61-68f3-8ebe-8312-a8d5d00957fb
 38 52b3a038-4da0-4c41-8e4b-9d8bdaa25ea4
 39 5597f448-735e-1fe4-8033-0b8b588dd72d
 40 928593f2-9c25-12af-922e-3dc945d6ab8b

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 0131641042785225754434322340574024628411. Exactly this sequence comes out of new Random(659).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 61 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results