A858DE45F56D9BC9 archive

201209241417 10ejg3

explained decrypted filler

3DES(name+title) ECB, 38 GUIDs, seed 791

Metadata

Post ID
10ejg3
Title
201209241417 → 2012-09-24 14:17 on A858's clock
Posted (UTC)
2012-09-24 18:17:15
Timezone
UTC−4 · title 14:17 against posted 18:17 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,448 hex characters · 1,224 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209241417) = 31e50e6177284de6f288c1e9cef00df4 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
38
Filler GUID seed
new Random(791).Next(9) ✓ verified
Run
Run 34 (seed 83,105,000) (seed)
Draw
242 · predicted N = 38 ✓
Machine boot
2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

9F1CA078B1CCEECB 22CA05DFD924F529 066B1548A6687290 4AA9F16CB0424BA5 B5C7C7C97C570C0D B0BE3246487381AD FDF1C525636EA492 2FD3E8288954D0DF 562AC3A330D9FDB3 559234A4492C19A4 932571BF7790AA55 0DA16BAEA048673E 87B172D95E85D455 C6CBCD3928FDC8C5 3460DBFEEA027F1F F3921316315C0E61 CC2022FA91DDCAE6 78B15348B021A8F0 7A32233AE0EA91FF A3BF0DBC405D61EC 9314559C0B6FB960 DE9AA8D7757A86D7 86FD7408868C9470 08AE0ED6DF4DD0C5 FC5337D047FF517D DBC32620C325DAF8 9D78AB180F265330 FA8EC524E36A5C26 C7A8E934AA91A6C6 01820B07E69741F8 5A91965A02829826 BD258E72CA4BA953 C8F3C7E788D25904 53D63EF0CB3D1C18 F42E2EF7D1BD1350 AC4A42EF412D6E08 D14E2E0AA9EF5C72 CE6FF8EB65411DC6 74304CE3AA1F0ACF E4FA24A28C5E6A02 4A4E913E480FA5C1 2C10242C70D10AA9 4CEA0B9E1B87B125 7C7D5C91B7A820B4 E7364DAA3958D588 383A5E1C750C0EE2 6A884BB62EA32F3B 6945997C5A5D9D8F 950E971AAB62DE99 1857173A62C8B45A 8F5A33C094CEB151 01D4490ABA8F5CC9 341BE784B9098CC4 117E818E82C28859 3B3F548EC16F512B 2FBD68C5ADC4A870 29F6A2421CBBF48A 9933BE1C18BB8BD7 981FF10073A7D6DB 96EC0EE71DCF1FE0 4CEA0A6B124C95D5 7A9E82303A675D63 475DAC4358E3D04D 11E60A7A98A1FECA 460B6BEF43B5F87A 1992007F58C2C508 B9EAA02A6430A449 D00B419E3718B8BD 23137AA4C752B03E CE7D6F318050AC32 982B10B6940FEF07 F1EBDBDAA9D7E45D 65C6D923FD5B2BA8 478FD23C2E442534 B89DDC3FCC36E389 0D7E7CC1BA67E2F3 7F7FF1DF29FCBA40 2A45536BB1DFD808 11659FD72BB9BE5C 31009802E319B1E2 F7559A40DE7F8887 DBBA0D6F0EB5B720 38CBF7C13E2D98E2 0D12CD2169F94F7D B5260FC7A8CAFB32 5EBCCDAFC6908AAA 640561A8CA11D0BE 57609DA053797D3F C7B60CE126F37ADA E9C7C1736C8756D4 108F4E40808264E3 EB80C2A016B169A9 D8AC16B9C3EEE46D 2E2C50FF3F66B92C 28FBB35CDC0AEEF2 868E5090215D17B8 69282C28BD5D4CBA 4C703120C2918FAA D087D9672329E074 FF7050FC002D876C 1DE5CDE31FD96E1B 9E989BFAC1FC077D 6CEB7AB0D7EFE120 CF3204C0BB615ED8 BB9A89493386BDA3 79A5D9946590FE1E 000D872D4EFC2EAF F6AF6C0962F3B0A2 824611B36F76E31F 482E3D3FDC7586B7 B7A15F04DA5298DB 7E01B2BD9CA3AC10 16979BD813293EC1 427AE143C4E02B25 3427B262DA91663D 9E41086B3273A1F3 758535478F95E4BB B624A30619B8E99D B5AA73D4BFEEDBB3 DAB7980379BF9E3B D58739A3366EA9EE B3642A9BCC503F15 46D2263C0CC01123 6B4A83DF2CE2520A 78F46A67969E923E 5741EB05E312D286 252299AC24BA9CAB 47A8FB612286FC3D 53B554BDF9D959A6 ED69FA91DE470D5A 14EF3EA7A65E6C03 A0C1386D2021311D 15B556D2310991B2 92DE1F19A59C5C2E B749D833FA79411C 743D1B3730A1EE79 6985F5AD04E02284 E5D0A0F9434241A7 E36045EE54BD6AC4 4608CE687312E5D0 4573B48074E71CA2 4139501DE071F561 13ACAEFBEEC94003 18EA5E36E3DCBE30 43B593DCAF12F7F7 F4B0E8DD2E29D83E C9DE8B47953893E0 C5989A27E352714E C6ACC4B4C69A971B 2356C6B33AB8EA60 891F897163CE0EAA A9F48F1DB912FAC2 7F7B3F9C19CDFB4E
  • Read the ciphertext. Strip whitespace: 2,448 hex characters = 1,224 bytes = 153 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209241417 (name+title). Key = MD5(password) = 31e50e6177284de6f288c1e9cef00df4, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 38 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b71d125d-9918-8eb2-8296-64eee6da4291
  2 8fd69329-bca5-853c-a2de-c94c349e23b5
  3 66eaaaeb-088b-606d-b6ff-8f09ff36a84b
  4 027953ef-b80e-310f-afa5-a1703284fc29
  5 27a8dee3-c79d-2ade-8952-6959e1fa0528
  6 880da3aa-a682-7f6c-9de5-b17b05b42768
  7 557a3fd7-1fd9-20ec-aaec-63d9ca1360f2
  8 5049e35f-33d1-29ef-8cf0-ac24c3b7eee9
  9 4fac14f4-8417-7f5a-952a-a7f24e386c86
 10 71ed30ae-fa58-85f6-89ff-67cb96612799
 11 4ebbbe35-367f-0f9c-8436-7fab31e3528e
 12 2d5a15a5-6eaa-0c90-a6b8-137827ac1038
 13 6f6b08b5-fed6-31df-a758-359a1c5a27ee
 14 7afd5ed6-02b6-8685-bcff-93d2c7ac5529
 15 7939b502-d59a-5a45-ac11-6e9ff000ecf4
 16 e750bd47-4df4-0aa8-a808-bf9c03349b0a
 17 c0f070d7-7d2c-32ef-a0b4-d6a2598ed8b0
 18 54b943af-9e8a-3570-98b0-03d9156cb5b2
 19 307884bf-c170-08d9-b954-c790cdc8d55f
 20 fefcebc5-2000-5d68-a2ce-be2ce23d52b0
 21 83757eda-c413-8469-a428-16da2c92472a
 22 5cbcda8e-f0c5-81e5-9732-8400f736aa63
 23 6b6f077a-3e3d-64bf-b6c5-4525ee2fccbb
 24 1089efbf-3df9-3500-8a26-820c40dda612
 25 9febd65f-f07e-296c-a5d7-5fcbb9d4821f
 26 def137eb-8874-2f5b-b3a5-10062fc81926
 27 c6d7f11a-ee21-05ae-bbc7-e8222bcbebcf
 28 64620c3d-5bea-74af-9005-5276673b890a
 29 10aac10d-5fda-079f-85a9-aa2a3aa3fe2a
 30 1d0d9332-798d-1221-8c33-88fee5c54e7f
 31 6a45afbd-9d67-1c5b-bbcd-c18b7051deb0
 32 f5d2f8f5-eb56-71c5-a877-3ceeb2083ea4
 33 723f6732-4236-32ba-b775-1d67e0270fb5
 34 f489ad2b-e959-7a45-a270-48ac252bac15
 35 595e531e-6986-7934-9084-b10ed07676fe
 36 6e69cc34-461d-07c6-9258-99633050f9c3
 37 68265a1d-9809-27ba-b2b5-c4649eb6d33c
 38 4259f613-9789-40d7-b5e3-58370feb06e2

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 88632722780038503305886322070117377024. Exactly this sequence comes out of new Random(791).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 242 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 38; the post has N = 38 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results