A858DE45F56D9BC9 archive

201209231404 10clve

explained decrypted filler

3DES(name+title) ECB, 26 GUIDs, seed 568

Metadata

Post ID
10clve
Title
201209231404 → 2012-09-23 14:04 on A858's clock
Posted (UTC)
2012-09-23 18:04:51
Timezone
UTC−4 · title 14:04 against posted 18:04 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,680 hex characters · 840 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209231404) = f958a9ea3383eea5dccb964b620a383b (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
26
Filler GUID seed
new Random(568).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
82 · predicted N = 26 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

3624A4EA9693B519 A40A2DA2A8059940 DD011CF0C09284A3 8CF96A2D2DDB353D E7BCEFC8E9E37393 CE4242ED6A576E07 B55804D08DE6FB0E DAE14004545CC7D0 84974B59D63EDE77 C79DB386128B5258 FF641C497BA38EFE 6EB0E46AFE51BFA3 6B1AA27593E9725E DD2758E14EFC1E10 42336E7183CF857A B841466E64814AE1 FBF658EDE90BA511 715F6273CC57C300 8E6272AAF2375DA4 7F2F4E410619B57C EFE37104A17FA995 F2BC0F87BF772D19 EE40D284919AE032 EB3CFEF3EE586581 52625A40F97BBF13 344DA8AC0948901C 7270BE497BFCE2CB C58AC1340EE0DF98 41D6CEB3A3DBAC61 941A46D019981110 C822ACA257CB8387 F308A68E16A9E175 C625D81252A10B14 54FBE09AF8C2DE38 876EE9907A220EA4 25F414DFAE31B22A 36B17D016DABEB93 C34E5AE4D779A973 98E797BD514E81CF ECACA602E39FE3D3 048FB023C5AD057A 291CA6878BB66661 B219FE05B226C106 C3A5F29E30A72F13 F8BA6237641BEA91 55996C9E11E6311A 2EF1484F36113F3D 99E10FCAF35F6E79 8737B4A062DB5B81 A7D192D1F89BC756 CFCDA48154C564C9 A1BDD6B5A7365263 0A47CB6DA4F90E01 C5A9ADA2EFEB8AC3 2CB9A176D5DECE41 E208E84F04BEE0D9 E53E9FA83F44C8CE D07783AEEBA9C325 B14AC3E6BB69D32C CF2F5A8351EA0265 240DEB5BB1576572 72A415D33886A8A8 1CCE18728D982920 59F85D103D7C29E2 9B86C737F8E055D4 8ACE7674BE6BA794 0FD59C35BB8A7C9E 23324870C8BF14DF 92A6679F93A135FC D49251183C770BFB 282D08C564CBA327 39DED8C3927E0221 1E2175EEFB80E5E4 BC30E61384281C6C 12E55162D974942E DECDAE3923FEAEDE A1323E647023DE29 A81956021A799C1D F1AFDFD53901C950 BAB963D6A23755E1 D9565A475FEA8111 CD35454BE14CFC22 4CAE79F1B3E44B05 70DCE906FCA1D3DB 95C0626B0E2FD2CA E35C41D5C4C63C41 50EF8EA12B164D85 E6202DD0054FB95E C340157DF9FB77AC F1CFA8DC692B1752 86659C14F1C397FA 52CC92361DEECFD2 0DF63FCE06966643 E93EC2C26A5D9BC9 615C3F9362688DF8 1B3ADEF8E61192A2 2CE2B7D13E721866 3AAA10A0540399C7 5AC298F3780F9B22 B844E9D5005A4BDA CCD05A9742688B24 4B5D32DD185EEAFF 28F2852F81C040FA 4E35DC4532A6E2C7 747D26A36D06179A
  • Read the ciphertext. Strip whitespace: 1,680 hex characters = 840 bytes = 105 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209231404 (name+title). Key = MD5(password) = f958a9ea3383eea5dccb964b620a383b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 26 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3b7be38f-7425-4e2c-a4e6-3084a5f5c4e3
  2 b7955a7f-b084-4c86-ab08-ee34cea9ce14
  3 f8214bd1-8000-715c-823b-f9c1b8d6d501
  4 9d78bd18-0390-729d-a107-c1ca831ad9fd
  5 1e8d7822-1c1f-55e4-b42d-6640df7ef5f9
  6 2d499d8d-8691-8d1c-b902-feb3c61a6d31
  7 f044f02e-9d01-31d8-918c-f04eb4ac6c72
  8 cde06aac-3f82-3f5f-ad99-0cf447e330b4
  9 97320662-3218-2486-9cbf-e6c47a0499c4
 10 767a414f-f3e1-6f69-92d7-191e00e9b0f6
 11 98e5e476-4dc7-6434-ba5b-c696b4b2aee6
 12 c9ab8f73-909f-888c-a429-87e9759b21e3
 13 cbf4ed88-9702-018c-8068-22dd28df1fa3
 14 928b85a6-f8bf-89ea-a236-b23653aa1ed7
 15 41c9ecf0-780a-5355-9380-0b3d027ea690
 16 2af5271a-4184-6db6-930c-c61d9f3d874b
 17 84eb5068-50bf-56da-81ea-f6f2a61f101f
 18 915dd6f7-82d3-1d05-8d75-7b1632adf3a0
 19 8cf00867-f7ce-0aad-b5ca-1d5638cf8a86
 20 6c183bee-25e5-2374-8a35-72cbf6c650b0
 21 b020a0f7-8074-2c02-85f1-3f32176ecb25
 22 0a83cb0a-2dae-1130-883f-f8bc1c65b510
 23 475431e5-3521-88e3-963d-68a6479fef5f
 24 b6c6b125-61af-47f7-99bc-98cb466a36b2
 25 7ca6b8d1-3449-3a44-882e-a06c51b502b0
 26 c2b6e8be-950e-7c6e-b571-fd2ad7f79b13

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 44775833266808565102218437. Exactly this sequence comes out of new Random(568).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 82 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 26; the post has N = 26 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results