A858DE45F56D9BC9 archive

201209241218 10difa

explained decrypted filler

3DES(name+title) ECB, 28 GUIDs, seed 883

Metadata

Post ID
10difa
Title
201209241218 → 2012-09-24 12:18 on A858's clock
Posted (UTC)
2012-09-24 03:18:16
Timezone
UTC+9 · title 12:18 against posted 03:18 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241218) = eb0dc5875b3027c73bb35fa348ff9fc0 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
28
Filler GUID seed
new Random(883).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
154 · predicted N = 28 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

E2D0A9CA87659A38 77BBDE5C8329BFB9 E16785FA2489205B 765F8345CB348FDD 46A80082010A4899 FD50148C6F0EC617 35ED9D5EB1A3FABC E99893166BCDAF85 02C8B7FB474C8660 E6F31F1BB5A713ED 033777C9D79CEE80 5D756FBA299D32D6 E1535AEB3E7FAD35 67B7AFC4C15FA0D5 D867DB7F69187F03 773F35D5BA6E74E8 68A282087AE13C16 9F2AB7F594219E0B 48E6082D19D2035B C06549827FFB2B80 CBD76B3F1EB17459 59EDC5C4AF8A7C6A F721596FFDB2D6C9 78F9456E0942F581 05D203F2FB0EF154 87CB5A5D887036FC D16DEEC88C942800 FCE997FA8259DDE3 CC2A6B6E5843ECE0 BFAB164BCA84985F A052FBE3945155C5 503120C43EEC81B9 97D34A24FCEAC73C 6EE461EF127EF7CD A1F66A0C1BB37756 C3A9D99ADC30583A 8348AC4EC498E841 9A4AA528F49CAAA3 2A1B641B37787B92 F391916AC074D098 901F924B2C29BAB5 A439E0D07ACEA05A D17D6BAEB2FBE17B 6C6A999C3C08444F D9880224D149EDDD D17F59A8D5744375 6AD0C44F4196E017 627EE93CAC5691AD 6A8A37D32A6007D5 FA0C987226B2358E C08D88CC4E86C88E 6CF1714217602E29 3CC787A8EE85E960 0654EA1AB73D5D6D 9AF2386982BC37F2 1A0FF35B65C96A54 D6123DAD3C28889B 3854288EA5B04A7F C91D9EB4F86C2E13 19A57C4A5DF37F76 6D27095004D0E561 8CECF8BF03959672 D08F33F6E702DF42 9887A1B80885797C B4EF45167863250C 7600E4BBF4CCB5FD 0DA96C746804B3EF 7222E8F41BD0DE8B E7CB6C784031BD7E EA0C85010930CADF 3C9F800596C8EB1D 0E7FF0F1558696A9 511F718197D75E23 429932AAE0002B25 D6406BCE732AEB7D 812138DCC754506B 4D0A923D8B9E6633 B30823AA84FAEB46 2092992EFE5165C5 469A84F3FAED9B70 38C338ED8A0E1191 6C155285AD4B4FF7 127EED08808BB12D AD98D006D8ABAC60 4362EB20C8C5CF66 46224000EB529935 7EAF5089A91B25E6 592CF0DA3A6EA62D 2414E7BE2AE0A162 20868B87345D7289 5ECEDDCD7980E368 F1D60796FEB765CE 32A5F84AB063C9CD 2531F05F7CD2AA20 B6B16F5F8A782BDE 127076FA26192DA5 DB7D7FDC487C6176 3D71CD1635EBD732 0DA7F669ADC09050 FCCF239AD6E6BE7A C4576226764B0851 2E3AAD2FD317465D D267D175ADAC9431 AA395967CFFBC7FA 73D32F4B7AA81701 CF79E6156510B60C 1895A4210502E79A 221C3016EF638FE6 5A3660D0CB0B8AEF 6FB365B4AB7C9EA9 612F816E45EAF272 357147112F7C83E0 D0A8976BB0619B98
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241218 (name+title). Key = MD5(password) = eb0dc5875b3027c73bb35fa348ff9fc0, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 49e7b44b-3467-0d56-a125-47119ca81bbd
  2 6417f183-384a-85c6-aae2-861a69bd8b17
  3 ec98bc57-1301-8b54-90d4-6cac6eeb3787
  4 a7c5de6b-a375-0323-b310-b0b70790910d
  5 48ebe09f-842b-77cc-820b-f948523a5d45
  6 5190835f-ddad-1782-bf4c-038508cf1c81
  7 c0ff2d18-f308-4b55-9737-9c6e4a699293
  8 edcf97bb-b334-3b3e-8688-18af38bb22a1
  9 161979ea-8702-1f76-b874-2de8251a670a
 10 561ad172-7eb0-7043-83fd-acb5547b58ff
 11 fd4c7928-d9de-7082-9d87-8a657eebd89c
 12 916f8edb-e498-7000-a5a6-fe100e30505a
 13 a15d9293-2fc7-5bf8-97f5-9c54680d9e28
 14 b345216f-7345-7d87-945e-673e681b0789
 15 85766799-9640-038a-873c-040d074db78f
 16 02cd6e61-1e0a-4470-b48b-050f5486ce5b
 17 e5625ca9-4bb1-0c48-af9f-2dade56f2b6e
 18 85803286-f019-4694-8722-924ed00668eb
 19 f96e3a30-61ba-58e5-bb9b-7ccd3958e4ce
 20 0479b133-c72a-176b-a221-6dca216f6cbf
 21 abb58cb3-c989-178b-a317-eba630650fe7
 22 e784e9f1-07df-45bf-ba51-d2951e4be31a
 23 73fa1c70-8556-2c71-8c96-817358076045
 24 b34d97ba-9df3-460c-adac-b2ee837b7517
 25 618a0c8e-8f07-259a-a20c-10c305aed12e
 26 eccbb27b-6f2f-454a-9033-1fa69b8956d5
 27 db79af9a-5213-0142-b147-290de6f9fbda
 28 ddedd3b4-c5c4-72d6-88e3-3f51ea2b80e2

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 0880714317775704045114242407. Exactly this sequence comes out of new Random(883).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 154 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results