A858DE45F56D9BC9 archive

201209241301 10dkyf

explained decrypted filler

3DES(name+title) ECB, 37 GUIDs, seed 392

Metadata

Post ID
10dkyf
Title
201209241301 → 2012-09-24 13:01 on A858's clock
Posted (UTC)
2012-09-24 04:01:48
Timezone
UTC+9 · title 13:01 against posted 04:01 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,384 hex characters · 1,192 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241301) = a71e3788b7e59340ba3ced9431f07112 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
37
Filler GUID seed
new Random(392).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
197 · predicted N = 37 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

CBFA64A23DF8731A 0B75C17C2B1B3782 684F0F10AC5158BA D830BF7E524228FB 7C868DC7989333AB 66F9A1B1717B50B8 813C253FD1C0EA67 CFC97D43127ABF86 91547CBBA813E0C9 13040FEF1D092624 3C86D468B2CA497B 677F82B4866475AE F78642E2E38D0477 8A7D10C209B48623 06354C411F6F94FF 597C890B0ED48858 1682B222494DC8A4 AE3F5AF33DF274D3 0FE14E20AC868F41 6AD4CF137AC81F91 298DCA809C4D5357 DBBCEE685C742A77 E6FEE5FE7A59D83C DD712975CFBED7DA 422632625313284C 554FB00915A4AE02 4A01EA19574B3060 783144E2E20F7665 E1B3BC8A85369F01 D7BF720D1D4E0DB7 367C6AFC9451918E FAFE4FA411844C58 87E600ADF07B5363 41011A7CE5351991 CC5DD72651CED0CA 81CEFAA6F2C80618 8D00EF8465458760 B43B8C47A8880B44 4027E012CC0490B0 460F5BFA3B25208D 845D32F830F96C04 7089802137878CE2 840CFA804432EDDE 123A213AEFDFC694 96E58F4AE52840A2 3F8F51DE4F0B1157 473EAFD5D6DB2E44 1079259BBCFC5A66 D5ECF411199269B0 82D9555F5165135F F7CC3AD035FBB25C 90F7DFF863DC894B 2F27C33510772839 3ACBDDDDF206970A 2839B6A407A61BE0 B50C26E196EE2E80 5444979E821CBDA2 947C3577EE374412 939A4241CC6EFE00 CE1E0C2C8D907896 00CB07D3B4C33BF0 79DAFD8C47B43AEE 2D8DCFA75349C098 F72C9025825BB525 F54B6B3AA7E892EC 1E7D64CCC9762AFE 56F51F264B692EAF 050498B79D112DD7 1BCCBEF13F643551 726C3079309E6E6E 01CDB5CDAC0D82A0 7A2E4F5E1493F42D A6CD3246485DF354 1ED5DACC1A6668F4 F6D7302A597C0CB2 59E742A296BC8B51 67D6134069866414 40B3F9E4A9A3C12B 6033406C512A0210 7577369BB28DA51E FEF318E4E173D6AF 01213AF42323DCBE 165D07A9B263510A 0A247BED34FC48C2 7A52624C9D74282E E59D82A27592C6E6 8BA491D717E11A85 2503DA0DADC26451 8C55326793C81F0F 1C8C82E7964824B3 01F0B4AAECB2B173 B4F76E29177937F1 B12E67A4787F4B94 3B304988039AA2F2 212BB60EAA0E6FB7 7EECA63565DBB8AA 5E07C5C0B9262EA7 91540F3BDEEB5BB2 5F74040E0C267B99 A1F199979FBAA569 88A7DECBDC496FEA DB73DB4CA1E21352 A65A29DE601DCBB7 CCB80EA2ACB7E940 AEFB5C99EEA4B28E 9B63F3D8BC3E0446 0DF24B9745F9D855 51532AC5DED3E6FE 240AD0B3AFE9FF45 6FBA68A7C8FB8D9D DE9B80C48309E4F2 AE691A6BB09BBF61 30A6B67741AC821A 557078A1EFD8DB99 1807E1E1B1E760C4 43CE213F5BFD135A 690B84F2B513F711 1A7A7355B18BD4CF 481238F79CEBD314 7A3E14D166AE18AB C767083DE5477149 413725FBE3F1FE24 C0E9070B9DDA20F5 8B75F572505F2ED0 C5279BDDBADACFC9 F167DFA6B7F5FBA7 143E2CC679224477 6DA036FD9FE32D83 9E79975F7717CDCB C4218EA493492927 86DA2856D039261E AC1D2AD3722DE80B 3E88FD76395A054C 9FA33C9B83793F14 2D7273DC4784B9FD CAE719779DA01646 31A1367940C97B05 C391044D3376F93A AB4B7148DC30B0EF 1CEC8F32C3DBEF70 3DB36C497650569C 4F9C93873978753C 9BF54B4F1641C777 0D3BAABC658E3AEF 3A35928ED4C0331A 9DA3A0B982D20BE9 5AFFB09526582CD4 3A00CE1352DCE233 D8CD2B28638593E4
  • Read the ciphertext. Strip whitespace: 2,384 hex characters = 1,192 bytes = 149 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241301 (name+title). Key = MD5(password) = a71e3788b7e59340ba3ced9431f07112, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 37 GUIDs as hex (shown below).

Decrypted: GUID list

  1 10447156-3cbc-420e-961c-27cbb0065037
  2 2697239e-25bc-79b2-bc99-af9db8e25ecb
  3 d296f658-12c8-6533-a379-a5e1f3c9b62f
  4 c2bbac7c-bc3f-2a20-9b20-ae4460c563fa
  5 aaf4d9ba-0b94-1cc0-888b-05ef9ba4069e
  6 62884a86-f4ed-1047-805c-23dd6c113e95
  7 f2a30e46-4524-4505-9081-2efc8aa7f275
  8 d6c282d3-f9ba-033a-9b93-c71fda15479a
  9 3e567ec1-b890-497d-92e1-32969763f6c1
 10 0f15d309-8407-73fc-80c3-0db69e6fc760
 11 4e5be825-2bf0-0b8e-acd2-4ca0882d69b0
 12 09df3115-d039-45bb-b260-88621386f85e
 13 a712b79d-e217-19a0-933e-069e654f7ffc
 14 2f4a9f62-a081-3a89-95c0-200ec538a298
 15 faddb187-5be9-3492-a9f2-2941e5c4cded
 16 196f8096-7c4a-7d44-9557-e947d506426f
 17 9cc5982c-f1d7-5156-83a4-c7e022ad45bc
 18 09a39e0b-0b71-0a34-b291-0042ff11b677
 19 d1bace34-a989-29eb-ae66-7fb528fb1ecf
 20 1fec1432-37e8-02fe-83b4-4f5eeaa2f333
 21 89516cd9-7e15-876e-b274-5d8628c568d6
 22 8e8298a9-3445-019a-a8f9-40615e3fe25d
 23 a16432e5-b4d7-2d0b-8115-ae37ec427814
 24 a3e79b9b-b2bc-85e6-99ac-93952f3ee6ae
 25 7aab87b6-297d-15b1-8e19-2faf44c493f7
 26 ecb5b50e-5446-5161-90b8-cc06f15856fb
 27 7422fff4-cb0f-803d-8624-ebd1b75b8786
 28 2d13eadd-cd37-5ac5-98db-338d42ed1050
 29 3c51b6eb-7c78-7455-a64e-4b3dae911f13
 30 be72a5ca-a21b-7859-93ae-46923679d6aa
 31 64eb1cd4-7d86-88c4-ab56-3e9e1004eb43
 32 541abf3a-1dd9-6b24-8e13-8927ad5817d7
 33 41ee5b37-0092-84de-9ca7-3644c0bc817a
 34 35119f51-f4b1-72a7-92de-ec4302285ac1
 35 d4a758fd-931f-4478-930a-d5b275881cb1
 36 1e471b2b-ddb2-6376-9014-bbefc6d1579f
 37 7a1724ea-9a78-6391-abba-2dee46be2d76

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4762114047041337502080281585778687466. Exactly this sequence comes out of new Random(392).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 197 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 37; the post has N = 37 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results