A858DE45F56D9BC9 archive

201209231407 10cm1q

explained decrypted filler

3DES(name+title) ECB, 32 GUIDs, seed 595

Metadata

Post ID
10cm1q
Title
201209231407 → 2012-09-23 14:07 on A858's clock
Posted (UTC)
2012-09-23 18:07:53
Timezone
UTC−4 · title 14:07 against posted 18:07 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209231407) = 6fa6465c8b9f735b0f37a1dabc8fd099 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
32
Filler GUID seed
new Random(595).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
85 · predicted N = 32 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

C0835A621B9D4B9E 05C155DC3F975E26 2EF0CFC9354CE7F3 403A16BF4F158811 F519021BAC9D37F9 0F2C8551D5ADF1BD 4EFBB43B6EF1E37C 4738B6BB68741AB3 694375C0498D7442 E3BE08B763B279AF 01826A410F1BCAB8 62BA85612040BD35 F76078D79CA91120 B961F3138008B199 5BF2307F19F01F2B B9776D23E05460EB D49FCE23116D2B50 3DBAD5E89EB58F75 E7E30BD615266491 AB0A34A7DA13064B 1F3706332986AC6D 6E38326FBF694D2A 08463F9DA7CE77A6 51554A4BCBD1DE0C 00E31715DFCA4E36 FB5F1C56074A44BF 95A2E69F9645D3F6 E57786A032639021 D5C313434BA3C9B8 63D48DA26578D5AD E231732538EE6FD0 709B11FA97A79650 DE9C63314DDA717A 0BD87249204E5A65 8CA2AA6DA194C8E2 BFDDE5DFC86C4F8F 674A82A6574C16F2 CF4BA3197F515CBF 6BF4EBFF60346617 159E59E309061D0F A77BDAA67DAE2071 81408DA1A55E4497 F392BCBCF85581E2 828F20103390FD1D 516E973CDDDC219A 44BAE1B05A207096 49B28CD122D8F464 27C86789D8822692 9F34ACCDC57A7BEA B60DACFC60884FE1 58EAB8434C1BD1C8 B614CCDC616D87B6 7D6FAF155ADB7023 910A7C8C7A828EEE 9C86861EC9A4621B E0E8A329E48621B2 C5C1444234B65083 32FCF6B27E5C0B08 4B7A40B5D0E08139 42E3EBDEF49AE3B4 5FF3F8726B6FCAD6 8B7B1F1D6CA67E56 C5D9911D6799E4F7 56ED1FA5441490AC 04B0DD1B7CDF2FE1 4857C2F64EBD475A EFF590FBD94ED05F C7749C6F8E5BC5F4 FE1C2F194376B70F 0407A5856630C555 1E5BACC489C9A6B6 9A9FF34C7856D1A7 5875DD298BACFE43 9CCB69EABB79CC6B 1AF12343412BA541 333C7E732DE4AA8D 700D2190949EF681 4C14F3B8B850EB55 45FC729F17F2B235 DBAE1868F6DE35B1 6F0C64DB359D6C8B C6DB4E1045C2B749 5E8D091B21B417C2 C58DD7A39BEAA11F 86F510004BD151E1 AF76179DC5DBB835 A78E072A2B511089 E9FCFB14AB9F80B1 69FD2248507785CD 65F14E368D88D63A D889C6689C76715C F422A7192C9D4051 D54040A08F7C25EB DB13E0354C2E71F3 80C2CD62DEFFF89E AAD1A4D70E14441B 6884CE31D88B4A3B F846CD8C51057229 149B3065280CC46B A29D3A3CA71FBF61 20EB1A46EFE9F4E6 250B7483D23B72FB 18CFA0544F43F325 3C71185E1363CF9B 774761F0225CF12E BBFFE4ABE886A07C AB07AA8DAECA3B51 BE00D816969270E5 C3E075CC6DAC399E 4D655C220D0C50DD AE1B7AABDCC807E4 66F2C2428A06DD8F 15955795CA6FF0DD 698D87D3C5D66581 E5BFD4D73B079F34 E921CB2E4B1680BC 3363BBA59FBEB4ED BC487E507BAFD746 65EA383E0F537ABA 55418B4D42FE8F6B 5CFD58AF5C2270AC 839E8CD422401860 C419A0045D73669B 2B08471322145641 C73FDCDCE9464796 6AF622857CD89895 A2827E48B49E97B5 3BF43E1375B54B24 D6C84D6E262C907B
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209231407 (name+title). Key = MD5(password) = 6fa6465c8b9f735b0f37a1dabc8fd099, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9c60c06c-9c49-5adc-8ee4-2aac55b84e23
  2 2efd4428-4a6a-319c-99b6-ead87b3b6ba7
  3 c65abbb2-9a5d-5c2d-98fb-1b8620bddc7c
  4 8b9eaf7d-c802-5005-a282-d3ee17e6e9bc
  5 1323b594-d7a0-7951-bb3f-fe2974aaaa08
  6 2c332b98-5300-4336-a6e7-39457ff048e5
  7 de20ff87-0360-480a-8707-b8f6f0f1dd28
  8 526de4d4-4d78-8943-8562-9f3676fda485
  9 61244625-d37f-5678-a16e-18b689c902b3
 10 60eab104-a578-6f8e-bb42-55fec424659a
 11 8682386f-861f-5c63-a456-ec519001a308
 12 f0246236-1ada-8064-b4c9-63f90d3408c3
 13 14e39fd6-5a05-504b-a0dc-4043bd1cdd39
 14 9881d8f8-dbe2-02e0-96e9-4cf0da4d4e50
 15 60f5f59d-7631-42d7-b91e-3a0c95d5a930
 16 ff57fed5-f4a4-572d-a615-5c734b2a6e8e
 17 2b7434d9-87f7-8386-b663-103fe2394b28
 18 ce1c8bc9-4fed-8551-bd57-7b029ab3320e
 19 2c850d6e-6fd7-7847-bdaf-5478ebba6434
 20 a00a48cb-1e69-6dc2-845f-16f3f40df7ff
 21 ea99edbd-1b6c-7fba-bc94-58799c99f78f
 22 725774a0-8f6c-75da-9fb3-823662e90a35
 23 c6ea01f1-f8ab-4802-903d-75767a4da372
 24 20b65c00-4dac-8e46-b4ac-4cbdbdc48ac0
 25 5812f695-011e-0d13-adc0-3024ad4a6efb
 26 c443358d-a2aa-1685-83e9-817b77eb540b
 27 74d74bd1-787d-49c6-887b-76b7087ab9bb
 28 97497f72-abff-30a6-ab17-7df0c91d445c
 29 5bb38ca4-cf5f-86ac-89da-3749149c7b0d
 30 dcdb0ef2-ccba-2240-a448-e56785707030
 31 ec8be0ab-ec74-7469-8003-bae943b7256a
 32 937d1b1a-93ce-1de3-abdf-b2997a6a4a7b

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 53557448565850458876774801438271. Exactly this sequence comes out of new Random(595).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 85 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results