A858DE45F56D9BC9 archive

201209231422 10cmt3

explained decrypted filler

3DES(name+title) ECB, 31 GUIDs, seed 473

Metadata

Post ID
10cmt3
Title
201209231422 → 2012-09-23 14:22 on A858's clock
Posted (UTC)
2012-09-23 18:22:02
Timezone
UTC−4 · title 14:22 against posted 18:22 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,000 hex characters · 1,000 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209231422) = 935083470fbf03364bd7ac40128a9fb5 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
31
Filler GUID seed
new Random(473).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
99 · predicted N = 31 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

3872DE3696BC1119 9DFD01E19FDA0183 6FCC4E779E45D700 7123FD3A9B0E763C 0CFF33E53D918ED2 907EC7E583F4BFF8 6F589BA9B5282CB7 3599B3304F80A8F5 5BF68A0B93BA3108 1BE8444ABF6165D6 6CF1718CBA0483D0 393C26374CE91234 F0376DB7E18161C2 B4BD70A091FFE7A1 6C67571557B08E42 B9BAA352148EAC99 4BDB0E6CCDE2BBA8 4D04975B359B142D 16C5C039ADC881F3 AADCC07280D4B01F 2D6BA396A56B1E34 4B31C27F0CB723BC 369E1734F4151F9A B8D0F34EAE438EF2 C4E714771D497318 0488C86C2224E5B7 850E92D136382410 8BA2E696B3F058FF BBC07C8DDCF4EE9F A824A5B69127EB9F 45E9D606C697EAD8 0D8FC90DB6BB17C2 761F929C445B580F E9149F8C40FC7B34 85EFE60338CDE146 A102AAB9D801A48E 8E262F1FF292A596 546A90B5E1746228 7D869B752AB4F738 A7375FE401AEE242 350AFD6240400530 10D44FA292D0C426 249F8AEEA4CB0348 35773C57809DFB9B DEFF463357E77493 218EE260EA5BC814 4AB0D65C492ECAE0 54C90AC0D7FA21CA 0E099B34AF891898 5CEF887E3A5C1423 073F1725093A3E29 72EB075B25F88F45 F56D05BFCD64244F CBDDD0C294785BD5 1488A3557FD34006 2EBBA91445FE0C62 28207D4E9F357642 5C6D7F46A4ECC6C8 85303C72618BB6C9 81B594FFFAFDFAFC BF0C8A7E55A48B89 1A75F41B3A5B3C88 10C3192662F61A51 0C6A35930E923DC8 9D57BEA6A18409D2 6685980C98658B27 FCF3832BD16C7190 7A2EE091C26BB062 BD42F64831DBE6FB 5927B8EF0AE9751C E883EA37F4AA7CF0 53AE050690CE7A59 EF1A42BF068EA1C9 BCB26C5A1308C392 1950CE8AE68D3871 4C5842CF3F16FB40 D14DDECCFC0DF2AE F9484CF74181703D 051D4989D5774D62 7E81CBF556541BE0 D92CA19A426C806A B0326E2DD5C952B8 C4F0907EB3651256 8F9A9760807491E4 95A8BA80D0B4C7F1 E8F94721482C4919 2BF78E0D62F83F69 DC28D0D262F656CA 607A5DCB703D7FE7 79D6BD94D466D667 08994F6BC4274AAF 31C08A6AC9DF1416 EAD2A452E2468B35 6A8298F513C4CFE6 AB8B33AC4AB9B7E0 22693FD4B6E14435 8F0E1F80730268A3 A99CF7197A9F04F7 4EA00A4132AA7459 CFE444BD9D3D0126 91EB5BB14BBEBA1C 8AF597F9851B6234 00074ECC8CEB5AB5 BF705E77DD52580C CD175D42137EE8D4 5B0915F82FD318AB D11565B600D8A407 5A929BCBB960C439 3676DAF6FF8A8ED7 84F64A697CAB0625 E885245A7D294787 AC3BCAFF8FC057F3 4D11FB3BB8B72E1C FD9B0D5E4DD116C3 A826CD4A8AC316E1 2DD6D6C3A3ED63CE E2E3383DA030F961 3C97D3F545429AC9 D5BE069D793E592F DDA9211C5DA5CCDC 2918DCA63AFE6863 A9B205F73DB55214 F177B96FBD9D8B99 8950A73879732658 65959D2AE203DCB7
  • Read the ciphertext. Strip whitespace: 2,000 hex characters = 1,000 bytes = 125 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209231422 (name+title). Key = MD5(password) = 935083470fbf03364bd7ac40128a9fb5, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 31 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d0580dd4-498e-75ee-b6ea-ff78056b9a86
  2 92f1a038-1806-5a66-bac9-cd7d7d96ac91
  3 74b81ad1-e337-39c3-8d4d-d48c570e9787
  4 3c54a5a0-c3d2-4cf6-9940-a5c9de5983d8
  5 28fda382-9335-6067-882a-302a2c5bbe9b
  6 a6126b33-5b45-8e6b-86be-668934fb3457
  7 c544ce84-11ac-7dd5-a873-56eeb890fb13
  8 5efd7247-1dc7-6f23-98a6-52850cbeadf9
  9 dc26f0af-a5ea-4f4e-9595-3d7be68ce152
 10 34e18120-5ef3-68ae-94ed-ce4bee1ba076
 11 cb7197ad-2541-6720-9009-1cc74ddb012a
 12 dd3f0ff5-58f4-6868-9c52-cf44adb19472
 13 6603408e-0d61-7a78-a5cb-2724f10f2677
 14 b28ef236-f229-4d38-9432-19022bd500e5
 15 a51b1374-d2b0-0ad3-9c0d-9d5d6cbaf31c
 16 948e44ae-961c-3d6a-bddf-20af2a54c838
 17 05834681-bd70-68d5-b0a3-5f394e11f324
 18 cf9b397a-0378-2f51-940c-fafbbfa22f86
 19 06c5a831-149b-4176-b9a6-74f46fd15de2
 20 ee1cc9f2-6c6f-430c-b504-69357b7906c4
 21 f512ff8d-b46f-55a0-9c08-fc83adafe98d
 22 4efce764-270e-8460-8ae6-cb5abcfb5e13
 23 72cc5740-1dae-8294-b3ad-9c3fdbe8df67
 24 834dad21-fdc1-2c3b-9d23-a8c39b8476dd
 25 f6f7df72-b6f1-0d02-aa26-a1a2d0090f2a
 26 3e9fcd16-92aa-6022-96ba-3bc1c1c2985e
 27 d40e51be-98ed-54f6-87cc-77aa918a5f77
 28 06c6e17f-8cab-65d3-9741-2a3313c16701
 29 75dc66c4-afb5-1f56-9a99-aa2e8ce21930
 30 c27a7092-ec1b-0967-91be-2c097f226ce4
 31 fcf76b11-8b32-730b-9e5f-ddb392c2b2ed

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7534687646667403624458820656107. Exactly this sequence comes out of new Random(473).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 99 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 31; the post has N = 31 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results