A858DE45F56D9BC9 archive

201209231454 10con0

explained decrypted filler

3DES(name+title) ECB, 40 GUIDs, seed 429

Metadata

Post ID
10con0
Title
201209231454 → 2012-09-23 14:54 on A858's clock
Posted (UTC)
2012-09-23 18:54:23
Timezone
UTC−4 · title 14:54 against posted 18:54 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209231454) = 7e6656ed386131fdaeb0816e53989019 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
40
Filler GUID seed
new Random(429).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
131 · predicted N = 40 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

922E9282EF3C7BCE E387E268A776ABC7 7BA2EA0DA6C5F089 72ACA53A40C19701 3B297784EA123AAB 90BF84B8EB5A9E3C 0324C6E3EFDAB826 6D2B256A1B110952 D39F38C2F3C24839 DD213CF98747906D 113C480EE557C3C2 4D227D3C24FCAC91 608A26E53E510348 B7A8090BEF0C8D61 5E807C49D2E588DF AF3575069B04F8A8 9B76DA7F08418CDA 1AECFA0575231737 7D187C2A0D97D556 25A2B772B59507FC 41AF991DDFB30DC4 BBBADE9C8E70AF3F DC8582FBC8900966 C963BB4E5ED617D0 9EEA345C68805F17 B1223E392D624B6B 856771A60ABB262D 3C84507B441C281F 3454685982646B28 C0CACCCF8D9D4628 0B7190AD0CE9840D 42AA7145EAEDEA82 3D9E3D81995F50E4 D7110B982C49399B 52FDE11860E2A5CB 43BE2FA0C1862112 6382C080DEDC4AC1 0766C337CC0F8801 847E086A7DD05C08 9F7B79F1A9E1C100 71EFFC158476F9D5 CC6AB2CA8FDAAF05 3797C3314B287ED0 1C2112EC429F21C8 CD45CA705ECC72E3 36D7EF595136A519 13813644DF039AAF B74D9190C1034D9A 93EA209E5DFCF3A5 E04A00625D6CD380 491F6E4C1B702CA9 3A7178CF213097AE 7318AC4DAE6A9B77 CEDB9D25D5EF4553 90D4D7169B747F65 0C5A0F1B49DBF5AB B04A3C342E2B444D F2FE70A78906A323 3F9168E9486E8E0F 665FA8D8065780F1 925AE2015CD86C50 69CB95BDBDC21260 7013366D2F016D11 285A77FBC3C62356 1604DA41679F72D4 AF8697244B3661E3 7836EC905FB7495A A7AAD2B74A3E597F 96E8E7305E1C5373 7EDA32C095EF1AFD A976D4D8DEF6CA32 F19A5CC54AF14628 099B37490655E1DC A585D9FAE23D1A67 46AA152416882FB6 B60B4504229CFCF7 15B93CAE0CC9CC53 B62D6EF915C63150 DA698CE57D2BA76E A2E5C713234F35D3 BC43BEED99C249CE A81D7F20203ECAAD B04D6D99BEB86C27 4A8DD08BF4BFCAE4 3705AD3C0BCDF7DE 2DF078C6D6E9F5E0 C83CCF2D8BB1EBC8 E801D740579510BD DF25595471B4AD13 AC6C97ADD2809589 F2D4D04E3924D80E A067919123C4FF34 67CCDF098D405963 0E662808EFAE529E D68976D87FA6207D 5E2F8A4407A9AB3D B71ECEA10D0614D2 BCBA27E036B2900F 11A0725DB3A96D26 53232C69F804DB3E E39A49C812411077 D8D733E7504E595B 8D5A880E41FF3B96 93A708F452B9CD60 E6C982C47E44B205 DF13CD7EBDD044C9 DC44801EDFF43E91 E4C79371B04176F5 5ED1F8D6EA97E643 401D5F1CC5506FAC E382527A8F12CE72 096DF00C4AECBC9A 154041F587F6F66F 63F1BDAD3768A820 7468ECBA8F95104C F2C0BA7FE69A6EA3 19472C90E2DAB73F 85786A76AE1B4C22 39E4477920702F3F A239796C7DB43118 9448201D624EA385 4D27DEBD7A111850 6F31157E340F471B 0EA9451BB352C443 0A7BC1C6BB6B817D 4B077E057ED7D894 957D2957C3F15DF9 331B3A5EDABA73E2 EF8AA847A67C8F38 0AF729ECB51DD0AD 0129CE1F13E79D48 0E378D3E69A00D71 5A07DA2A18090DCA B6767912AC7DB42E 1949899ED9F52306 8C675CA81EA03F19 953E6C201BC21EB4 A56A997E092A9D5B 1A482C08D21668AF 4D8643B1E66E5FA4 4286DF8F91A035DD ACC333FE19BF28F6 D4E271EB754D6A6D 766FB13C323B08C4 347ADBF9A641A67B B8D7ACE1DCAB8D1F 5609AC6E88D49ABE 46D67D4746353482 E4870E8E942BECD9 92D15298B5B06B1F 3292F1836949FD77 202277BC495BD2DF 526A76F71311C05B 1755F37BC3441102 DC957AFA67684648 D9CBE35729901894 09355C3BB9D264BF 91FBE0523CE8C543 992F7620F2060F10 4E615EB77E9648D0 19D3E7BEA58F2353
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209231454 (name+title). Key = MD5(password) = 7e6656ed386131fdaeb0816e53989019, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 298ad8d3-7212-7344-9adf-245a512e1ca0
  2 e33ec8a1-7545-6f9d-a189-36a83f3d29c5
  3 27c41395-458c-52d8-a219-46cf0a24f52e
  4 f1031c72-2a33-11d9-854d-74c0ea249656
  5 2ef48efd-1d09-869a-b7ab-6341c9dd01ae
  6 7af488ce-5e57-4174-9648-2d0654586420
  7 6946e291-d2db-15ce-81ed-13fa02f5d21e
  8 408aec20-637a-5711-911b-e0d74559d53c
  9 c2eb631f-cda1-0d55-ae9a-8ce67a0ea09b
 10 0877df03-eb78-4ea6-b76c-9196da4d128d
 11 0c336a30-4cd3-3662-b37c-200837ca5e5b
 12 d09a08a1-73ee-3218-9e5d-483b9b423342
 13 8cca873b-4942-45ff-a922-63fd30dc2517
 14 fbbc79c1-c021-54fe-9a2f-1add54126d9f
 15 9d3b424f-9244-23ac-ace0-5e071ae48611
 16 ce2959c7-f21c-86b0-b25a-de643a01f1a4
 17 14914cd5-8e3d-1d17-bfbb-6533bbc6459b
 18 ec4959a9-9a9b-8610-8a72-798acea447eb
 19 3918f6d3-e046-2d54-a529-8bd638da0079
 20 e6c71aa3-3c4c-363d-8a55-eb37a6bc0d63
 21 f1aff92a-7268-7859-919b-138be51f84a7
 22 7cd9e5ba-d634-04ce-98e4-cd17a2d59604
 23 fe3eaf3b-03ae-4b16-b47d-b57e79221191
 24 b2320713-1f3b-8262-a388-dfe771102cf7
 25 a927f260-0e38-6a04-94ec-6ba5780da93e
 26 e089bc7e-69d6-4c0a-a39a-0c265bb794e0
 27 e8a6a075-af0e-613b-8b34-80a49a6f70ba
 28 c565532d-6519-4f62-8793-4bab45020d15
 29 f301ec80-afaa-05ee-a279-2bc1b09697ec
 30 9000221a-2391-59e9-b94d-a526b8db5282
 31 55448f21-2272-581d-aa06-af4550ce8ace
 32 6fa13e80-bd74-40ab-8e37-71e639addc3a
 33 f052cd3e-69e4-7578-b00d-68c353140d9a
 34 4c406a2f-23be-6c96-9d28-25ec727e3f3b
 35 8e6f5c01-4943-3eb9-afc3-883107d336d0
 36 2c5903ae-a68c-3354-af69-645d08cbac4b
 37 9e8b0d6c-ca2c-3500-9efb-80944e8a1dac
 38 a04237f4-033e-6604-af73-c5fe42dc8e1a
 39 ca966db7-facb-7e3e-9688-102e5a4c4b59
 40 95cadcd5-fe42-4bf0-8a71-a50d3a3314fc

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7651841504334528182370486464055476333674. Exactly this sequence comes out of new Random(429).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 131 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results