A858DE45F56D9BC9 archive

201209231408 10cm3k

explained decrypted filler

3DES(name+title) ECB, 28 GUIDs, seed 171

Metadata

Post ID
10cm3k
Title
201209231408 → 2012-09-23 14:08 on A858's clock
Posted (UTC)
2012-09-23 18:08:53
Timezone
UTC−4 · title 14:08 against posted 18:08 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209231408) = 8ad3e468e04cd66058ff184817e2e396 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
28
Filler GUID seed
new Random(171).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
86 · predicted N = 28 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

67F9BFEBC40AD801 32C289595060EE49 86C591792687E85D ED4484861F20C574 9EAD2A0B719D4501 D99FDEC9D7A18548 B73563E3787637FC 672753461F036362 F989E2E5F8F42256 FB211DB1C2354251 8F6214D648EDA385 CC999A9690324C41 FDDB2220B27BEE0B 4CB6CFC1BE96E52D 5A7DD6BB6B3286B0 E97C71862E20EF3C DAE52DCC32F74D7E 3527BD1A87E20C4C 8A1D73E197CA2791 50B5AD7FFD5C59A5 86E52FCBD413B63F 1FF4EE3C194042D5 C3505B2A799E0A6B 411751BACC4E112C AEB68DD81B504540 AE6E1653FD8262EE 922E3D8131881E2A A50E1D9D04FB6CE7 4BC5D8596CC6D581 3D9C8EAC76C11154 3DCFDBB388D8DD61 6AF277E933BCDAA9 AA2A9CFAD9657866 54EAE1974AD2BAF3 6873EE95CFAC6BEA 9922328A421888BA 090EFF2753637B18 96AB38DAFEC5A6DC 601C4B0FDEF49D60 BB236CCFD0F7B371 726AEB490E224525 B9C7D9AB4B9B6B05 0825427F3276908A 6306D9FD83AF844D 77543D046668EBBA 722F15EFE94B0657 4E288748873A9005 F072AF8B6F91EB26 CB2A3FF9B3DAF580 724CD159511A0708 3DFFF428822C3F6A 13101E0D0117B332 122898A084A44219 E308F09BC5A49B88 7B1B6E3A3E62FC70 A04A3A57A6DB5685 12F155B782DEE09F 796B0E7329561586 1183AEBA6570EE8F 9F3247AA0D43FA54 7604AEBF0368DEE9 992B2E6254424154 997F74B289839FDB 957E587A0A08CF0E 70D3DDB40F458A2B 6F6FF0DEDF453176 FBAF3E50BBE81821 1E6A08CE446DD21A 571B47DE73F663BA 2FBD379DBC28E578 601269FF5902A670 15C59EC9C4F93FC8 EE9A7714FAE7CF47 707B951E472ECCCA 066909C86CD44BA1 AC7ECE2C243F5479 48F30A6D573907C3 43E314567454B195 BD5B0A9AC9769A11 15962B08BB23E44D 3E7D2AFA9EC7869C ED08019074F867A6 C05B41B6B1E42D22 CA8E8CE5117C45C4 1461F6A5A7EA3462 86D284555D67A427 4BAA2C9AFEDE613E 1C6F54C33D27443B 42C15F3BB313D280 BA869C1775056DEB 084DDD50BF915803 E52929490E207ED5 041061EF4ABDDF86 18492D12C5C9DA15 9E3571B6F6807477 85FC1F0202E6F067 427B9D7B6BD808B4 9438101CF37E375B 400D7851FE00D7E5 0FB66FF53A19E3A2 1D0F448E78520A23 E4329BC7D6657483 0FE6CFF97ACCB089 B4EAB33F9CAC7FB2 9BDBCAEFF32A03EF 8B84E30DFCDC87C0 A9CF48B3E804F94D B66E54CDD9AB0524 9225BD1897BABAA5 C8647F2E0852A367 D6B67077CE90D43D F57AB754D2A9E3A9 039213B9A01B8D6D
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209231408 (name+title). Key = MD5(password) = 8ad3e468e04cd66058ff184817e2e396, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 03b62a30-40d1-0ba9-9efe-c6ecac80836c
  2 00461e40-02aa-8d7a-9732-797f98d575da
  3 e82ecbbc-5566-2d19-8ea6-9cfb172ee908
  4 040cc4dc-b2d5-0315-ab40-a6b7838506bb
  5 25827197-e140-3ae2-8eea-570fe02a3e0e
  6 a314c112-f83a-8415-b394-7f3c317de465
  7 f6e65787-1dce-4afb-8c66-784608a46949
  8 4d2e33a9-7436-2021-91d7-3e6535532604
  9 be8597e0-f61f-1c02-8193-b759986a7e79
 10 a2e2a506-296a-2a29-a7ed-85bc6003e801
 11 c163d12f-ff78-22c2-8d79-55d653c19eb4
 12 dca250e9-030b-83d8-8420-64ef7563ffc5
 13 c7bc05c9-091a-1423-a5c7-dd368338b5af
 14 b7859b16-ca78-3ad6-871f-cd0ca6d6aafc
 15 44f2380b-2f7d-6f29-9ab0-e3e63661d637
 16 dc319cc3-2348-7096-ab17-9c79271e45b6
 17 c1f1b970-122c-6026-bae1-9d80565fa76c
 18 33db4291-e99d-0893-908d-d8ee6937c94e
 19 1647e404-4363-2b70-90ff-23d8db21ff60
 20 6e5a956f-fd77-4b05-8ddc-7bc0102b4a0d
 21 6fa35172-980c-478f-8c07-507694bdedb1
 22 7395617a-0b92-79b8-9a16-c4261a3a3554
 23 be0eb8f8-1b3b-841f-9150-8856c60edb36
 24 d0725fc1-4ff5-69ab-a649-512d523d3133
 25 bb2fb979-9ade-415a-9573-c8e9f4726bad
 26 40de64e9-16b5-4d28-b6c4-dbf374de3b28
 27 6a07a18e-ced4-8e4f-a9c4-27c0b23f2c00
 28 3db63181-7ab0-5818-aeac-0a243d4c6a49

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 0820384212281367602447864485. Exactly this sequence comes out of new Random(171).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 86 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results