A858DE45F56D9BC9 archive

201209231347 10ckyd

explained decrypted filler

3DES(name+title) ECB, 31 GUIDs, seed 403

Metadata

Post ID
10ckyd
Title
201209231347 → 2012-09-23 13:47 on A858's clock
Posted (UTC)
2012-09-23 17:47:39
Timezone
UTC−4 · title 13:47 against posted 17:47 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,000 hex characters · 1,000 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209231347) = 6d1b85faae7f7c50217f7a5456cd48c4 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
31
Filler GUID seed
new Random(403).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
65 · predicted N = 31 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

2F24D514D0AD4582 DB2162D64D692875 067AB465DB761105 A4BE9DC7B2515742 B85D553B289A703A 25F89678CC958160 6D8EBB9B1D0957B4 C37B2B0BA72CD7A8 8F75B6967D77CBCF 2E77E22523EF7A4D EC2F9DB5646EBBA5 8857A75B8EAA8034 F02ED5E623CB2FCB F31AB4963F699C5D EE7155EB807ACB6D 94D39876C8A628FF 989A6435B9B58E2C D7A8C4A2F4745964 90895D38F01C52DD 52CFEB4C1AE538D0 A10F3C5D63C69709 21B60703BA3C08F4 EB0CC519E80322E1 60B5D836C34FE21C 9427E28E16734B69 FDCA16978B96E21D 6F5AF118EB5BB437 F443B75AF5575994 B38D89CB856D95A4 8C9D9628A24AF064 D8FA8220ADC514EF E1FECCCD9DAE7B6B 969E212ADB580C53 5825B2741C193679 59346793241E783C 2862FF6FFF7AFACC 3670764C211A6BF8 D44215A12D2E0834 C73FB89D5031BDEB DD6F4FAAF594BB74 15590A6BA041C916 05455C3D039B87CD 4BDBC15B09AB9572 0068C4F0007E5E6C 14486A375CC37DA5 A28C4AE240AA081D 03031C519BEA3725 197F068E4607C284 CFB64162A6625EC8 80E24392EF619A15 97F3F96C135998F1 B05132DDBDFAB80C 37381AD3EF695A11 8F6DBB5B647CEC17 C739AEA748891C47 26ED613ED16AADF1 424F0580D4A76CD7 9020E5CDAC9C54D3 4F26AA26C56C5571 0E29003B13869D67 E588DFC3D37A62AA 343DB94D7FF306F6 F90938FF06C978F5 94834A378B17EE65 A6387D4A4E22CC81 3F709031610100C6 9042DC67B2FD522C 4D5C28FCB0EF3117 8908EB85A0F1EAD8 1388972315F5048B 2A43A463B6ADECD5 E62D01548B6BDCA7 4423AE190347B3BE 1BC15035ED9C86FF B5CD9E6B5438E74B 987C2DB6A5571A89 DEAA10B6A71F7414 C42DE37C63EE0A63 7FA21B1AF1D74144 21B745BAD1A6A584 5B513BC9188A678E 3C67007AF7A1FFD5 C4001FD78A5DDAD7 8179A0EE644780BD 88175E36900F806C 82292CFA9C08C38D 614CA5A3DC9FD23E 9EA3D1EAC8E33569 CCC67DDC09898AD3 9B464518A9171DC8 671C7F43DAA8326A F01B091B7174BD8D 15F42C4C1D3457E3 7DF51744ACF62007 A95D99B1BCAE364D 3968AF0C8F1CD4DA 35C71406C0A73CE7 381A2596FEB33667 ED1294A313FC76A2 B7DEBAEC93C95F3D 0E2FD0A69E1A49DF 5BF9688FB2713266 772D33CF6554204E 2A3F03A8ADBAAE9B 8222A7B72B6DB3F5 C6E8C9D3FB9C15A4 A6EA1BDEB0E26963 69F301E7D1CCDFA8 795055D4EB6CD8EE 438E0C8E8EE7944E D8DE77D4B82AFDE5 5ECE8DDE01A5F6AC 8D115CB283077B22 92BBB04C3D819C88 9AFC38C89B52E45D DC6536D824E167C8 11B1B4F69AEC830A 82FF69A944E35BAA 2022772C3614911A 12826E7672EA96DF FB6A208C668D74F3 56B6FE4F10B99864 51A7CDB9A777DB94 51ADB0A396B8AFEA 8C5B7BA935998C12
  • Read the ciphertext. Strip whitespace: 2,000 hex characters = 1,000 bytes = 125 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209231347 (name+title). Key = MD5(password) = 6d1b85faae7f7c50217f7a5456cd48c4, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 31 GUIDs as hex (shown below).

Decrypted: GUID list

  1 8e45774e-c776-2a8c-b050-a2e0ca917129
  2 18defa77-0070-07a3-a2a0-99d2257a42f3
  3 3dce9d43-6706-4882-8fc6-1a3be19c779a
  4 c25979c3-3e3b-5409-8bc2-f04f2a442416
  5 c5907a34-7efe-16c6-bfb0-937dc303fcd4
  6 c19ba45a-3c19-6330-8f97-7fff74aeec17
  7 e6fd6f43-d225-4722-a448-f9ae50c7cc08
  8 49b3a338-7955-5689-8cf6-5e8eef261a2c
  9 3d2e4ded-6e57-71cb-a232-61e3bdb59cb3
 10 c4b3b6d9-3866-7ad9-b0ff-48fe7af99676
 11 22763ae9-646f-191e-ba9b-21f27515ba89
 12 4e0a8edd-92fa-0b8d-8b1e-b48f2566fa4e
 13 cedbf05a-6a9e-6c31-8d5e-e684ff51857b
 14 90dc3413-1d88-1841-b236-c4aa252a658a
 15 d4be186c-a944-0d91-a2f8-4d48e6f523b2
 16 2717702c-8559-6fff-9682-24279c21cb4c
 17 f350e146-2e81-2e06-85b3-c963dba2f63b
 18 b52a348e-78ce-72ef-bbaf-de8f34d7020d
 19 7ad0f4cb-39fe-5102-a38e-9c4d0f1529e5
 20 4c85cba4-fa16-385a-8877-a51df757b434
 21 c66ad6bc-2558-31c1-a4ca-4cccaa1b96bf
 22 0ebb2d65-4843-6e0e-96bc-79d448c2f44c
 23 992a1e13-f214-02fb-a146-372eb05ad38b
 24 136cca5a-0015-7b2d-a849-135e758e4591
 25 bdf22e1f-9e46-1c64-8ab6-31d7cd934057
 26 b146e90f-ed9d-66c6-a1f9-5c5ff428dcaa
 27 a1d603c2-51a7-35a6-8ad7-b86611ab8334
 28 6fc13505-971a-3499-8817-8279119ea74f
 29 95c0628b-2719-7b25-8169-01082d57f7db
 30 b6777108-0849-5ea9-8bf1-ae4a187a96fa
 31 3e33a5ae-0276-8a2d-9e30-08844b4bc776

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2045164577106106275336071633758. Exactly this sequence comes out of new Random(403).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 65 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 31; the post has N = 31 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results