A858DE45F56D9BC9 archive

201209241400 10eifp

explained decrypted filler

3DES(name+title) ECB, 41 GUIDs, seed 4

Metadata

Post ID
10eifp
Title
201209241400 → 2012-09-24 14:00 on A858's clock
Posted (UTC)
2012-09-24 18:00:00
Timezone
UTC−4 · title 14:00 against posted 18:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,640 hex characters · 1,320 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241400) = 6da9d8b96bc26d3c4c3d2ed3c36a79fd (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
41
Filler GUID seed
new Random(4).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
225 · predicted N = 41 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

BCB112DC3A97E024 640F4C57F56411A1 C834085191D3B2F9 317D060301ABC0B0 32D91C3406B8DB4F E847D8F6C118D068 A6AE2878668B358D 7B64694695147604 5A25B668EE4D009E 755DC616C5DBC98C 4F54E01F6725C762 FFDC0B8CB8B27717 EEDB785BCDDCC966 E576F55DFBA6732F 9F859E1FB1C8F4BF 71D42E8185DBC3CE 5FCDE6C4522901C6 050ED50C06601CCB C37433AC6785B6E3 E88E6557E86CC3D3 793B9F86B1D13A81 FBB441F420B9BADD 10928FC293750702 630AAB0CA7E8A936 6E8F1A98B7F4CECE 051CEA8CB1D1F80E 4477841F39C49096 113F4D14A3C3756E 4F384DAD16D28F09 74AE90EF942A038E D512E91B48EBD7FD 452954383F0B600C 48CBE17B87DD9768 49DCBDB19D89D50C 3178CF8C1346257A 013C7B9C05AEBEED 479124B24824F51A FCAF55B3A039041E DC636C800305726F A6EDD0D8D1935ABB A10788634DBBBFA4 876BFEA75138836A C5C40BA74D6393E7 567AD6C97A007D4B 6971E3E0BE975313 0F30E216A97B3830 10B19E74715A6289 6B5D280B83A35E31 FAA4BE1BCBA15AE3 E3A076D9FFD3356D F0C80705136417BE 1BE10B8DC43B035C 06F161AC3BF8046A 74E87441D4027DA4 50023F22AFE2D5B0 388585ECE2E4AFCC ECEEDAD3616C7799 40214AA41D133993 D82360133F49257B 8630F6B2611B44AE D45FDA0BD2EF6C28 5B1532D1A466C0F0 53318A293BEC79A6 1BEB8A3AEE194426 6E53F56C171F3D58 149C68261AE21ECE 9230C067A23D1CCA 0D1CF3ED90F2F913 6B87358B38EA7838 A228F4E4CFEAF69D 000EE6A5B475C262 B8C43E542E49DAB3 EA073042B4D30C5A FA290DC6A83312E4 E90E7EFBCEA90A12 197D8F18EBFD450C 7B6B0917D92B89CE 2613004CEEE61C1F B0F3673E683B5691 2D755301475567AD D21802F35C07D07F E7DD1BBD0A079EB5 561197040C60EAB2 BFF0FC667C675E37 5FE414AA75D52218 9A51931FF0397095 AFA1458F194801DF 9BD2C305742FEB79 97F74B4EB42073CD 728EA1747FB49566 5F2022D7545D5CAB 289BFAAADB45FB7D 3F120B3A915467C3 098A4802427C10FE 1E9E76E5D6153D26 28142CC4B81C2BC5 1040F96F8E01B0F2 5F77FDD5A53B6DA6 E908A7859F7F6F8B 56C553012FFDCE1A ED35F3774EF15409 516C394E06C32063 8B1BE793087DE510 D725FC0D21904056 DBAFAE32AED146BB 0DCCB449B98FF749 C7DCC894E14FFFE6 DF487A24BA3C2301 7F639745B6D35510 B80BC3671CF1A6BD 74E4DD82E4B9CC65 3E697B09746878DA FE46BE49171ADB26 4524266526BB2EFB 5475F01B12877282 71B617B099AA84C5 A2EBA785D8772C17 7ECCC67A340DC3AF 4BE72AADE0D3525D 0F47B515EE486515 C21ECEBE75A6A7D2 18CB7656E9A7B884 BDDF73DF97F23B7F 78D860BFDD3F7E90 656CB308F514CEB4 DB2BE4AECC2D5B3D EAF084B0630327AA 3FDB65C7993AABC0 AF294AFD020AABD8 9BCE75BC95E41EBC 7BA5E5E9B2708587 B6DADB2968789E10 AA17DA7F0E2CFFE1 95D163185EFF9481 26647E575D15A8E9 DD042DAD090A549F 60024E465CDA6C4E 7D45CB2E5C0667B0 0712A5B47D2D9958 126090263EA3EDE2 1FCBC372B20DA47A 6860FE9A689CA859 23F48C2D6B789015 5E18B24E0CF84E8E E71A50A1144C4FF9 C15F50BA730E7BED 2BFAAE3778E5DA67 F6BE7A061FE1F33A 3BF420D6066F8041 15BAAE41BFA1FE37 48E553A24F823A7B 8DCE95CC2710FE48 D0312D249D1494DF BB51F1E513D72207 A683D6F546FA0E4C 000E73195A0A53F2 A07A66187863DB30 B252FD412B2BE9A4 EF2F60AB1ED3C612 37B3A011ABB9EE94 94A68403D54881DD 0322896F87837C2C 34556CBF891F9CA3 65ADC8C4EC6AA9D5 797B25233639F9D1
  • Read the ciphertext. Strip whitespace: 2,640 hex characters = 1,320 bytes = 165 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241400 (name+title). Key = MD5(password) = 6da9d8b96bc26d3c4c3d2ed3c36a79fd, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 41 GUIDs as hex (shown below).

Decrypted: GUID list

  1 02d5dfea-66af-73ee-8f8f-57cb0c1415cc
  2 06560714-dc74-8ace-ae2f-316e9a69d86b
  3 bcbe3d39-59fe-5747-a65c-063f747874f5
  4 c6efd758-b197-3366-b35b-c3565c6f292c
  5 35c3f6d0-e539-01d1-aa74-538dd09b9cf1
  6 e9c1df2b-2c88-0e5c-adae-22894ab3a5af
  7 4b973d81-4002-6b54-b4cb-e14235d3fd06
  8 7a8227ca-d50a-432d-891c-b40d65399dac
  9 4b1470cc-8ec3-4b04-9186-cfdbefa548ea
 10 0d86a347-3324-6fab-bd25-a9aaac88d5a3
 11 37c5506e-ca53-2fd0-9a84-0f5c7163d804
 12 0cbdbcac-f372-5d45-b8fd-34c3a92a79d5
 13 8d3a4f46-8c08-3043-a7ca-a2193f4bf855
 14 2507f185-2355-4cc0-9f80-7cb980a32e2c
 15 032f2ce5-d80e-7ca1-81fb-769a45119927
 16 80fec948-0db1-4984-bfb3-480654039f21
 17 20499371-dea9-4106-8a14-27dc4738b95b
 18 85fc0033-1def-4168-ad92-fe578e3869b4
 19 a143c7ba-552e-7f31-916b-d86d6f8bc54c
 20 6f039481-8037-798c-af2c-311146b70ed0
 21 609a02f3-b1b5-386f-8495-a46d6fcfebfa
 22 4e5a18a2-1d63-7864-957c-442414badedc
 23 2cab6c28-eb89-6373-a179-9e90d1a6830b
 24 fbc7d0fe-6fe4-3acb-98db-7e7d53d5dc6b
 25 32d0f396-5fa7-088a-a591-c54e6ba36985
 26 913f026a-d224-04c9-a80a-869c1e4151b0
 27 8cf6ac04-fd72-32e0-9de5-99780326d11e
 28 e53be0d2-f077-140d-a5c3-1e8e6c8ae4ba
 29 f03ba1ec-f313-5591-9607-be2d2d3e4689
 30 3dfc4911-8f63-224e-92e2-ece654d03e44
 31 42f180e3-830c-5da2-bc5d-0f822c615e48
 32 820e0a7e-b226-47e3-ab82-a21f2f21d858
 33 482d34a5-5a13-843b-a462-7581bd2d9ccf
 34 23ccb4e7-cb6c-0a61-8873-ed981eb04607
 35 be642941-e180-049e-8055-bce304c078fe
 36 611f9415-c8d7-8b2f-8cfe-1c8e70d12755
 37 227c26e5-1785-33d6-b289-0e51f9f90d22
 38 92f762f1-1bdb-0cb1-ab63-e977904dfaa4
 39 f4ad848d-e91a-0393-80f4-c2c146faf925
 40 aed8f670-1cd5-2d69-82d4-b44c85d6c42f
 41 7527a93d-9cca-5684-a145-153defbab0df

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 78530064462534744477376300315254800830025. Exactly this sequence comes out of new Random(4).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 225 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 41; the post has N = 41 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results