A858DE45F56D9BC9 archive

201209231453 10cokw

explained decrypted filler

3DES(name+title) ECB, 40 GUIDs, seed 727

Metadata

Post ID
10cokw
Title
201209231453 → 2012-09-23 14:53 on A858's clock
Posted (UTC)
2012-09-23 18:53:23
Timezone
UTC−4 · title 14:53 against posted 18:53 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209231453) = f659e2bbdf31a15519ea05d7b5efb865 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
40
Filler GUID seed
new Random(727).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
130 · predicted N = 40 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

E9740A63E5CBD50E 355F27DE1F2164EB 3B245D7BA438C690 2A662859C2EC8625 12CAB07556B05E40 C1FE9C6D949BC695 BC7B473FB4ADB502 FBA861A1CACA966B 4FA9155E51F79EB4 64CD8894EF163910 74617EBD9496B1C8 0F02A1ECAE5D83F3 46612FF9B3BF1AB8 BC50418420D27495 5625FA4EB4B5D81A 8AE7C623A2401A21 BAFC0672EBE25D19 00F5D1A4525C312B 8860F34B15C8B743 EF3601E2B291015C 7009476B3C072364 9F07F902CEC9FE32 72B7B4003E76C97A 872CC9587D76797E F4AFFD08E81C6502 0CC0442549A1C900 3E4A4988E29E146D EB9657ACC7BA8ADC 4F8001C4781383CA 8BF9E08F59E0F43F E4EF405F29899015 27F928E1C096BB90 94C927B8352EC41C 7E3CEC9338AA7617 D1E3A9C4EB42E8D4 7993DE4F5CEA70CE 4AE11377F77A702E 59CA9591D4743BD3 7DF3D98F1B5ECF3D BD09CDBBC8B5B106 5E6B87B1CE27891E C1DC7BDCAFFD90C8 BE928D5D6FE411E4 69C19CC750FE8402 30D99094037B4139 40D010134E8E62DA 022CB3086263B223 B924FFFBA6A7F4A6 87E84B5EDDFEDDDF 494BABE2A7421FB5 CC383378079A5A2A 2739B2830822601B 3C0DDD9A50CF9266 755BCE107CDF0BEA 33DB5C165FB149D7 477E66DD93F3B626 F77696259BB74F09 E7A6276B52B7149C 9846EA0046744B84 07448FD0776D6EF4 9C08B3412D1BF648 326CEAF2344BF787 19171017DC27ABA8 C0C4E63BC0AE9E20 9910EAA6B17D0509 410A56EECE3529A2 19CAF3244F6144FB 6F90B85CCA56DFD0 FB3F1D094471FE85 34183783A7B31EAB 8420722538E36C63 9EB56DEB2F528638 B9CDBFE0EC49897B 5451F1CE49E037A9 FC4A55802EB820F4 8DA4F248C2F5F51E ECFF115C0C1AA104 75AE0377957A2532 7CD40234789CF459 1F034CEA5A7122EE A2B4A8BD79D1C075 DE0234F40399E2F8 31C0D4A84A7EDB48 9D94EC05FF23D041 054700DA0973FD11 F06A0A30DD420573 22B11774C849D67A 466F512BAB18781C F22966DC91CB5BB3 A87BF01C5E126D25 83586F7AEC252597 C8D84CD5E53931F0 5EEC061DC4702454 19C0C0E2EFA2AFBC CBBC953CE0E7C179 EC54535F2AB8A3A1 A9D2A14CF19B1F43 6732D5F45EC008DA CFC54DA535A53335 895EB00F1B762C0C 024490778F806645 C1B17A463EE6D215 DAFF83D6CE320C96 10A250F3BD7521AA 304C4088CF68DF47 5CCF35A4D93FCA02 1F3A0E4D1223E64E 74E68E8D082C4B08 2B84E920F30FD649 5EA165F2CA79A6EC F203DCD2C9E8DC48 F9F4A93F9CF4661F 846A0312BBD416D3 33E7E39D545A0720 797E8D11FB5A9F15 A7B2794F319930A8 B70ACAF4A93F82D9 2D21DF6AED779185 D89763D932D790AA 36A196CBABCED1DB A7F747423418E21F F56680FDF589B488 99F2712EFBFB07F6 296BAF731A4FCE74 1E26FEC5E6611CE3 063E7D3C8B0A8D36 230E3ECC0509ABBA 0F534B6E507EE760 91D46AD0D0BC0A6F EB99F8FA3F72D789 213932662E035EF6 D566787571ED340E 7713CC4BAF1DC86A 87FF5133C7EE48DE 5B94B35AF3088CEB EB0DD224BC122E7F 29F68FEFF140F35E C3190604AF687E84 D7D49669D2DC709A 7ABB152A7118C5C3 E81C309AE22A7428 3E708D3E56B30A60 7B02D154A98B0A21 19DC53C12906ECA8 4ED8BCD72386A717 4D5F02E958422828 26415D9DFD6A79D1 E6F4877D3FA32CE7 F7B522DEFB535F0E D7DAE2D9DA298795 F5AD0F8A6749D82D 73801E864898464B B00EF9A36E3598B7 6FDF3C09E4B1A192 A90FA859F3F60C2B CF5E0A86F65AC10D E663B777468D876F CF47835F5448CC71 7468554A3A8B04E7 52E5D448A9957583 3DC795BE222E16B8
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209231453 (name+title). Key = MD5(password) = f659e2bbdf31a15519ea05d7b5efb865, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 301e2c02-96a6-4906-88ca-0666e10dc541
  2 e90010b6-41f6-1695-bfa4-018d002cbdb0
  3 d7adfce6-5e7c-8824-a5ea-f6af5134dcc7
  4 56819457-d56e-6c2b-a823-61818ed8226a
  5 52240b95-83cd-3882-aabb-0679923e3507
  6 d8b3da67-2cfc-7fe7-b073-fe777f50e04c
  7 4e04f18e-34c0-58ea-925a-7f5086faeebf
  8 af2374cd-e471-1971-a01f-e07821cadfec
  9 9f4fc806-c391-8fef-a6d6-6f8f0577378f
 10 b4b28475-c6a5-3da1-b182-67c4e61e8384
 11 cc44295d-94af-8fd1-bbe3-a985b9a2f48e
 12 79ad4129-f60d-04bd-bbd2-20381685d3a1
 13 2a67cf6d-fcd2-3e52-9c82-bf22637149d3
 14 6248079b-eebb-6b4d-8a6b-263846a5c73f
 15 071a33e4-26cb-720b-85a2-eb3e4911d858
 16 315cc2ab-a356-0782-8441-322f303655da
 17 4bf4dbdf-43fc-4dae-9339-8488dc9970f9
 18 33af4a97-9695-668f-ba8b-a6d15a2ca1e1
 19 326a4913-da4b-3031-9fb4-b625a771620b
 20 99d4fe72-3b94-7299-9e55-2bd319751cee
 21 1b57662f-b925-37e2-8773-2cacbb36ac6b
 22 2834e4ed-ac21-1c09-ba7a-a9f959662f56
 23 0300da49-78cc-7cd3-b153-01c6a0ce2c6a
 24 cf2fb309-b684-0e20-9994-c8f9e90dfafd
 25 815b59ac-8fb2-8621-bf32-e8aabde64123
 26 5849880c-789f-1fc3-8194-0227be020d47
 27 0a56bc3f-57bd-8a39-9fd0-feaf9334bfff
 28 6e965e39-47fb-12ed-a9fa-93e459f18761
 29 3e18d198-b831-3890-a942-ff275f523386
 30 24c09135-e3d8-5fe5-aa3a-80ad0c441330
 31 5cac0e05-f2cc-57fe-b292-f507ab7dfdb0
 32 5db51495-f95a-8d63-9299-e5974a5b67d5
 33 dafd398e-a830-56fc-95af-750bca4eedfd
 34 7ce6b145-1762-11f0-bbe8-45d577f8fa4f
 35 b3828dd1-c28c-4a3e-9316-c35dae4528f6
 36 699c4c46-261c-2ab0-bff2-fa312e7b5e42
 37 1f5a67a2-0b62-296c-a373-4ac58f532954
 38 43d7b9a6-7ac4-7212-b62e-d27996fb048f
 39 435330d4-f35f-7837-84c3-5b9deb0fd39f
 40 cec9b139-684a-6f19-aa59-0dbab31ec404

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4186375183803670463731708181355851422776. Exactly this sequence comes out of new Random(727).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 130 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results