A858DE45F56D9BC9 archive

201210020720 10t7rj

explained decrypted filler

3DES(name+title) ECB, 28 GUIDs, seed 480

Metadata

Post ID
10t7rj
Title
201210020720 → 2012-10-02 07:20 on A858's clock
Posted (UTC)
2012-10-02 11:20:08
Timezone
UTC−4 · title 07:20 against posted 11:20 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210020720) = 14b9cdc09b848e1e68903af42b0e386f (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
28
Filler GUID seed
new Random(480).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
10 · predicted N = 28 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

624F10390251CCAC 45248EC19D01E999 B2A1B020D68A0298 8C742E186B65CCD0 180B6F0D9A016B86 26B0B1DE04F088FC 13E1820A6A8010A4 697878391CF14CAF C165DA61AEA39138 DDD7DE4A738AF691 5CF1CADADE86F053 FD72DA5EF2A98D65 10665D3EF60B2126 5DFC2D717C7DFECD C10951F7317E764D 069D4A8B174014E0 52B9F7EA3028F452 FA940D0C4A51E283 DAA2E1D1764C76FD 2DDC82A691631DE1 B7C4C5EF40088A6F DEACDCB0FB38C1C5 C57D424284879DD8 17DC61721D507616 93B89EDEFF7BBAB2 AECC17146D591CA1 8648238D1DACBD18 BFD39C4E0AB56A11 9EE1949B8882FD51 F0C3F941294E417B 6464E7FD9562FD34 CD2E2E452FEA35B8 AAA5449D087D86E1 9ED1B6029F5A7CA0 E0FCE5F1266F5243 DD2EB4A78C883B7F C17ED2DE71B2930E E2F548B1D8BCB8FA 8C14E0312A7E4165 C0AF1D2934853982 36B403E9A11232D5 DCBECF85AA91A7DC EB46BA9C7A8259AD E54F7C36A07D6BC9 21268E6B8449A469 52ED024B0EACADE9 B0258E250945FF3E 68414A559F5D4EF3 31B873DE2F7DFE86 3513D829EB8C3B20 5C84B24E03C96692 139DEE02AE022E85 603E8D6AC41CEE32 D86AC793445A9481 2A88698E96AD1DC0 2B6553398549976B 6CA093EECD6B1821 882646DB4985EAF9 E3E057D3FD8B8234 B546B0313933D390 ECD1720A03ABCD8B 165A12B66EA10561 51FF8C1F9AFF9D0A 3813071E01F6A19F 2224A426FC496694 9F513462D9B33A0B 58DFE965B579EE49 0F70E527D18A6A7E 135526950920A3CB 1AA90F80AA1A530C 1E043FD02B6A55DD 2A51114634066B9A EFB40766983B1898 E00E278BB65AE314 D1573EAF0FEAD7CC 6C37AF10DFD8FC94 1AE893F04981D0FD F7BB851EDDA08A2A DBAA8175ADEC172B 60379C95CFFC8051 76379CF583C8CC1A A0138BB5DE56C9FF 73FABFD2FCC8D064 CD484500166C1286 7C6337A6A7AC4C56 59B7344E77D0D027 421FB2A4F72EEE17 9DD6637E2701A809 99A8C4A1325F41FF F93B338AB1569B87 4B39D54C70D20189 1C86C20E80B964D0 D277EEAB1B749619 50808ABE8353E1BF 216E836E1338ECF8 7DEC8E51E4F385A7 F178ACEAA49C92A9 1F150C554A07F073 67A37A329C61C575 15F22380CBA2A29C 8D49CE773558CD40 E32BDCCDF1EC975A 46B7AECB12654066 511C9E2529212F39 3F79B4D9C9084D1C 9338303EFF6165E1 631465D1BBC361B7 23CB6805E52E9849 FC88569EFF9069A4 5D30D1CAA21EBBC0 0E37199B81EB878C 1D3D49C94CD48D82 FB742D2FE60C87F9
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210020720 (name+title). Key = MD5(password) = 14b9cdc09b848e1e68903af42b0e386f, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d73d5617-7009-49c7-bb5e-e7d6102db799
  2 adc70bf1-76c6-5f0d-a79f-c78517c6aee1
  3 2b740c98-e27f-2619-a762-ed791f6b9f16
  4 0a17fbb7-1e17-0b42-bf7f-9c62d08ede4a
  5 df4e501d-179f-819b-8e92-8968c043acd5
  6 89a80fe0-36bc-0df3-ade7-501c964065c5
  7 47e8710c-ff95-8339-9c5f-60515c10084c
  8 e3fd30ec-62f6-2767-b955-62adcda83aae
  9 62e1771f-799f-3145-8061-52c70d83f9d7
 10 e1c88752-5e53-29f4-8e6d-220acd647094
 11 e7f10450-892a-8b6a-a38b-d7f4ef90b9b3
 12 edd117e1-f998-12ab-ba09-0832456fa95e
 13 57970a98-dfb6-5c37-92e0-10726163e86f
 14 dd08a903-5bd3-1e0f-acda-27cbc67ab22b
 15 cdcad471-ccbd-8c66-bd6e-d1dac82190d5
 16 5023d454-68ea-769b-9594-f5f0531d7db6
 17 c545c47b-94e5-5c67-a0d4-cb36f6f477ec
 18 d0771f55-39ec-515a-96f6-773042c39f4a
 19 d9d57935-cc36-6f10-9423-6f3fa31cd4c4
 20 277df376-72c5-1701-9e9b-8742a424880d
 21 d94c4e74-5a75-5fc0-954c-b8a4939bfb0a
 22 33b2675d-b14b-5fca-954a-ed2c714c807d
 23 e831dde9-d60f-1a48-a7ca-6719e2694223
 24 f65bba52-38bc-6aa4-9635-f6ae1c4c0a01
 25 a60780f0-26e8-60e1-a263-c66ee0abbc3e
 26 8fd471ce-4614-2e09-94b3-e60db393d6cd
 27 bc6a9e5f-6cb9-546e-923d-f135bdc59197
 28 011089fe-37e9-076e-8896-18a5cef901ca

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4520808232815187556155166250. Exactly this sequence comes out of new Random(480).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 10 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results