A858DE45F56D9BC9 archive

201209231403 10clt9

explained decrypted filler

3DES(name+title) ECB, 41 GUIDs, seed 54

Metadata

Post ID
10clt9
Title
201209231403 → 2012-09-23 14:03 on A858's clock
Posted (UTC)
2012-09-23 18:03:50
Timezone
UTC−4 · title 14:03 against posted 18:03 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,640 hex characters · 1,320 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209231403) = ce50931c85480d594f8e36a4903d7a33 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
41
Filler GUID seed
new Random(54).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
81 · predicted N = 41 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

53B0BB74BA2932BC FCAD2A50C5844A21 B3EB20DCFEBD5DA3 920E48E38E8B6776 9558C8FCEC99753B 91A3B0B94F179E24 7034AB0DAFDEB72D 952DF8CB18E03398 9E8E29D4B1F2E3A2 D00C1A02A7091E54 6790A8A9CABD2A97 07B0F21EB41D811C E8D07E7AFA0C4CC1 92CA8292CA64DDD8 BD564B24DAE721F2 11292E7B61FEE05E 67D6802CD04CA1AD 14E6379F2522014D 219D866A26CD731C 6E92D5F84A20C680 94B2316351F846AD 220E34A4A1B6903D 60F79E1D7FB7CC17 D2DAE2890DD1812E 23A33DA0335625F6 F8EDBE23AF9E1538 A567DEDD3173F50D 754060620BB0186A 427E049ACB5265B3 2BFF5D5C050EC867 F9020E61D834D185 C736BA9680FA073E B462EA32CD1725D2 DD0D39F4AD878DD1 F40C3263BB27F6A2 6F23F0D5B5C5CE52 ED4F6ED55B66AF9B 32818AED4F39EF4F DB89FE153F084E7F 5C83EF6C416B23F7 163A654377E25B7E 5373C939A744C4A4 C10A6FAC2ABBE430 D15CC6EBC73380C0 DA847EA6F50AE93C B3388FA237C3583D 13A93C2F3E54C2BB 09C753DD37E26A28 1E0C14E2B2E608BD 04B3AF560915BD98 43620309AC8286B8 DB19C9A0F980CA7D 8EC3453AB8A600D6 610CFF7D31FD8B6B 8AA9C7EB03C83CCF 24843269A7341706 7E529ECB775686FD 9FA4FE9F3AC5EC20 123D727C832F739C F4B082C6CC7E5B32 0A5792EC61551F13 66A26031242094E7 5A32B9684EF4D0BB 3CFCA37CAC2FD42D 08A77EDA44D57CC5 7FC62E3F3BE21486 8F270BA4565E7FD3 494F7540C285FF89 7EEDA91213D5DFC5 4B5267F7C7096B1F D507FE42EC3CD8B1 A08537A8435F8666 50F836521DB7CD70 7A82AE8196580CD5 3274C48F5E970266 C5B024BE25ABD3EE 376545ADBC66BE87 E4D0997C87590341 6DF843C8C91B32B9 080AE6736253BDE4 F5041173F8D75B51 76588415101196E4 F4B226F109CF8D6B CDB4B4ACC9E4F11C 82A9CF363BA390C9 26148C3C0EBC3D18 71D480588D247990 1D554B0ADFA251C7 5202CE3B6A067142 EA5D1805308B7D1C E36737F2B6BEC402 EF2448B8DD953ABA 392AB213F7DC4559 AB8BDA3243523C4D C619C16E4CFF9EC9 8B5A5923DD80F10A 10160ED0D6446A51 A3524472BCB53802 9A22CF4C127CDBD1 1BDBB24C0CDC737A 23B445B811CE06A4 9E36969B81DA9473 C79039FD909C9E57 C008F314415933EB E60C0932E08CFB70 B691FEE0ACE1E9CE 19A07A2ABAAF7989 2A2F6BD3A2514398 9086F0B6D50ABFDB 185C63BE71A0DEDB 5716910E575301D0 9000A54FC599D3E3 590EC21231FBACAC 2803978D36D2AC9F 7EFC83CAFA37A78F 1A13E3F223A1E247 3147D4B7CDF6C977 7BC2EE1EA9485E6B 90CFA2D5729BDE07 DF2640987CCE651A 3A0500FB5E7F7FFD 5DB339603FF9AB17 BEEDCB149023E8C4 844B18EF3BCFCFEC C399B664EDB8BF7D 31DC610443F32CC4 D3104EA29E64E851 5758DC322741497F 94DF90CD22BBA09E 50B6D3158521C69D 8C0D00F06F009C40 2E56FC498FB21A1C 3D070A2F93FAB10A FD098BDDFC251E80 76F6316E960FC954 4B5A2DC1D47F6DD3 9E02D844E67789BC EE32F2F7C865D90A 7BC703C9E3FBBB97 FD6D18E379EF6EF5 6C0EC0F998610EE5 8A9124A2FCE13F04 446DAD8179AB8EF1 81CE82D2FC2B9550 D49378B8B9864E2C 26C1F336F9EBD426 646EAE0AB232B894 C9A494DD317D5683 18E9B96971C55086 7F5F1CEB8D99FA53 B1C1B7D9BEF21AE9 33BD42E1B4B73288 7E5D2DF754166F37 81664F2745B671D6 932BCDA48851A9F4 4810F99096D48D97 DD61150BDB82B693 90822BD2DDC56248 5F3A49839EC7C87F 0819986339049FDD A484921C08573440 33E57B952FF0754D AC8634F74C478223 6E9BB75FC115374B C565E27E7C2236DD
  • Read the ciphertext. Strip whitespace: 2,640 hex characters = 1,320 bytes = 165 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209231403 (name+title). Key = MD5(password) = ce50931c85480d594f8e36a4903d7a33, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 41 GUIDs as hex (shown below).

Decrypted: GUID list

  1 63f803cd-190f-8200-af86-8594642aa7e3
  2 e4436701-c42f-5bee-a36b-8d932d5e9610
  3 ebcee2b6-e59c-487f-82f3-f56b314d9a0a
  4 cf5adb42-7f65-0400-8885-f4aee9bda340
  5 a0405450-e329-5bfa-9e59-cb50fe8440b8
  6 2677db65-66a7-63cc-babc-903ca426a8c6
  7 c9c507bb-5599-0787-8607-51e4a9089909
  8 bd9c5481-5a32-42bc-9187-0f1c1d61de20
  9 6b9c743a-b2e3-55ce-a7fd-6dbaf21d0111
 10 3b238956-4382-1a29-be42-c8f5039fe82c
 11 21275869-c186-0468-84ad-8f97345710bf
 12 5babaf9d-b4cd-5e6b-ae0e-124a32b38e2b
 13 a6e852a8-efd2-6c96-badb-39b94ccb568b
 14 322b988c-ebce-5d56-9081-ad59f3c566f4
 15 ad539b89-fbf4-715e-ba3e-c9817a4eef5c
 16 520833e0-9892-684d-95fd-072261427941
 17 f49f513d-56e5-579d-a47e-94e8e741773d
 18 08bc4e77-3bf7-4547-98bb-595dbc2cf4d0
 19 223cef7f-22a5-12e3-ab99-981c526b8ccb
 20 4429b417-f30e-2abd-a651-af2e641c916c
 21 910a3ce7-05dd-858d-b65d-e2956dc279e2
 22 684cdb49-2640-0f09-96d0-d341f5121bda
 23 9605ef2c-202b-161f-8bbd-7efcb15c8629
 24 9305ed0d-6baf-843f-90a3-757df7f51692
 25 61f8724e-86ef-8301-b381-497197089d47
 26 4914326e-1720-26c9-a876-1e0fce6054e5
 27 e00ea172-08f6-364e-9103-878fe20d5bdd
 28 af2a4951-b927-113f-987a-44971ecac384
 29 e86c4fb2-dc7e-46a1-96ee-4f1da30a78b9
 30 6e447e32-bdb8-5450-923e-66b2d9817e07
 31 e508a801-8bda-13a4-a854-a5637a3c2750
 32 f48a3472-83af-67f2-bc42-61268089c4f5
 33 378af085-e02d-0817-a6f2-a33165c37bdc
 34 87ff56f0-a723-3c36-86c6-bb5cc274cdd1
 35 a6a266fa-f55d-4556-a5b5-500d4ac72794
 36 1f9c1c1d-af72-06b5-9c4b-4d2d09717640
 37 70798ee0-564c-6886-b3ff-cc5d8cf63029
 38 0e04c24a-df0a-1e29-b9f9-9384ecfb52f7
 39 7bbf6e08-bced-521b-8965-c9221f424f36
 40 77262144-f385-532c-b5ad-0e3c955d1512
 41 f515f46a-44c3-8d22-b646-165320e7a07f

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 85405604510565765412801882314516034061558. Exactly this sequence comes out of new Random(54).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 81 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 41; the post has N = 41 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results