A858DE45F56D9BC9 archive

201210021120 10tijp

explained decrypted filler

3DES(name+title) ECB, 43 GUIDs, seed 363

Metadata

Post ID
10tijp
Title
201210021120 → 2012-10-02 11:20 on A858's clock
Posted (UTC)
2012-10-02 15:20:17
Timezone
UTC−4 · title 11:20 against posted 15:20 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,768 hex characters · 1,384 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210021120) = ba43c05285924e6fa0c70a19daac72ec (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
43
Filler GUID seed
new Random(363).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
22 · predicted N = 43 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

9A7A698AD7DEDAA1 4DC427C4633FE23E 3EF4739AD07A06EB 66AB5982E6748BA7 C16736C8539E3703 6854F0B1DFA7BBCE 489C53543C6F751A 4370CDF898E824A0 A66376710AD96453 9B538CDB25DA101A 60B2C34E8A54C65E 8872E6BE8D6467CD E3C9F150F42B48BA 47DA9789F29D9E76 5A0FD82BE095B154 EBC50F5CFB0AA739 7875B9E36AB8F7B4 CC18089614390310 FF657433847561F4 3A0CCBE19045D8E8 C28A2AEF76A870BC F2A93C725E148BD7 6DAC089FEAD3E951 62141BA0309076DE 5C48053CC91E1178 F1EB2F8308106CE4 3876D4EB4D497AA4 F48097B418500197 0B9BCDC30BFB07D0 20BEAD31B2592F9A F2BF86B7AA8BFEF1 DB33E2BF85D0A9DB B17713F65D958AE5 004AD3D87C144B0B 6E9D1C4E4F9591A0 B463A037904B0702 B1F5E86EE99F34BC 6ABC3160F08A4949 85533EF7851B2203 5E1C0EC5FB8C7CC6 47B00F783B136566 CE6578E557E17C13 C825325DFCC0ABE0 E58C0805E9620D70 15674BBF2E83292E 13A6B58FE4C8AE99 8409B6CB2BF06EAE AF061CD7ABA505E6 DF1BF5FDA2D4E05A D7B93196E341DE8B 49541FC95740F341 4075F7EE50F48ED5 C85AC26D444C7B51 781111F68F913766 2C1F126F885C0A89 06306F7077A16DE4 4024BFD119094CF5 2E31D7A83A6032F8 C4EB1C8458D80B34 525C488CF11F1457 5EA13A33D7F89300 C1C9BBF6077A47C4 68E9BB27E67FECEF B64859436B485355 667C6DEBB40D63C6 7B1F80F16DB39BF4 8EA6998798786ED1 79F2E31FB8303787 B003774467BE1771 8764BBF172238F48 EE1129DD701555C2 6B25AE81AB782327 132592AEE397D07B 6F7450DEA2542412 4C4846350C1E158C 319223E6DFDEB54E D287F892AC4EB9F3 7E4A533251BFC11C 3190B1C0AD5F04BC E1BF9266BC583F88 37022AB61E330B8A A4BB49D77FAB930E D572BA9797E3ED88 7E0D553C3E75AE0E 0E43458AC74CB15B B3EF844DB6844865 EAA85F1379C00D3D D2AC29DF6B2DF55D 37052DD715D1B1AB 214CC21CD261DE26 8315795E7823AA0F EC90E7E3094C5D60 0926DDAB45A03BC3 8E1CB3649B1550DA D15AFC13BD39BBB8 EA9460FA2E66FC84 8AB45029D452448C 362BF65F965ADAF1 848E0159288A64C6 05787B05ADF5039C BF5C1ED8B9C14C6D 1495BD71BFC5B901 F8551A0B29544622 5DC8C570CD42C565 F85437B55C66FD9B 2B2CC77B8F694FC7 D4B014875DA7A879 8A3E49D4F66EA2B9 43E663C2B0DEE242 E9FC8AE5645D5890 BEB6DBD4171C6404 9E32DF704B9F8A98 08B625B410631984 26EAA114A42F0DE8 DF63B69535EF3D75 992F5907158430B8 4B628ABC5DE856F3 B9D1AC08D2015BD0 6FDB029110B62AAA 0B59DE1204EF32BF 66BB1D307AE1E1CE 3B07FAABCB71235C D80DE82DE8D89691 C95A16D3209F290B 5C7A8513AEC26A19 4F3F647D7C083D71 F5D2CEAE068A7F62 1659ED8B598E3971 2053F920F4F1731C FBABA0AD02D25FD9 93817E95FB22CDFE 76C557D871A20961 45B3DE475E66F871 8FCC4425EC6EFA47 4ADEA855BABA7F85 9114AADD794E6145 CCE19149C2F2061D 8951DF96B128A1BC 2BC6175FD270A262 F6E65A19E80FB01F F46491ED1D961713 478193BD5303E3CE 6D6F61C43C5E241C 9F6CACDA877D2055 AE852D00C22D83FC 24CEF2B899FFDAE7 D61DE478A8FEDCB7 1B998DE23FD80380 5CA0595552F28E45 61617482BDE178DE 1ED98A90C899DA06 1D084183DAD61D37 3A771FA0F19D2CA4 6E224E82CC223C9A 588F94D052456F18 624E86679BFF3D6C 4007B7EFC85A8208 F14D59B1E17FF585 4710B866731F2664 792D1D6FD5FFA0A3 AC209282ED59FE21 0AFADEE1B794811F 0D1AD35291C80122 BEC76A9F72CB5FB4 F5D35F55C72EE580 F9319A7B475404DB E8B283B9B182FA03 8B8CA8F1E34DC620 BF17C926995E926C 4BC93F355746CA2D 688B6C501269485F 252CC09D28A4B706 038B3745BF6F2FE2
  • Read the ciphertext. Strip whitespace: 2,768 hex characters = 1,384 bytes = 173 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210021120 (name+title). Key = MD5(password) = ba43c05285924e6fa0c70a19daac72ec, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 43 GUIDs as hex (shown below).

Decrypted: GUID list

  1 7278db4c-b51b-37f5-8673-35fd104cc095
  2 ab4a7a67-7b71-2d56-9c16-4d34325db4b5
  3 13f0c6ea-71d5-418e-b09a-7a86fb92809f
  4 00cfeb8a-2cc6-03a1-a151-b6f213ab629a
  5 117b167f-e441-0219-b341-3fb584e6d863
  6 5478f324-d719-77ff-b323-2de103855b6b
  7 c74197db-5bad-4184-951a-5457431d80a3
  8 ca6b6367-4174-461f-960d-dd3c579d0423
  9 ea45acec-3aa3-7892-b86b-dc2185859453
 10 ca8b2b8b-3bf7-1f81-95e5-1203b918e510
 11 81712537-771e-667b-b659-6d16039cc7c5
 12 1414ad10-189b-7c39-bd6c-165d9e51d7ad
 13 315c9762-5571-12bc-b933-f685dcc720fd
 14 cdbe68a6-e03d-28df-83c0-7a8c76cc93ba
 15 4386d381-6d3c-0852-87c1-3a6fb9fc3b41
 16 9c8c5ced-d7b2-6ca3-a661-36035597289b
 17 3c27eefc-0d66-4728-b989-1c89be9e4ed0
 18 b2ed01ab-1c7c-0be6-b018-2d2ce8f2feee
 19 db70664f-f413-416a-a7b6-d8a702a066f7
 20 bf0cff05-4cf8-7338-a110-decf0c6da945
 21 48daa740-abd6-09a2-ad44-c3eeef8f4d98
 22 facf8158-6507-86bd-a8e0-576bad7b6120
 23 2d8945a6-6fca-3240-93b5-a6d4ef829fe9
 24 81ddc47d-cf2e-7932-8bfa-30b3aca924ed
 25 bfdf6b64-6232-211a-8cf2-72109b19c9e9
 26 ed953e2f-f3e9-0c95-974d-0fbf4051f58a
 27 6b0b45e2-cff8-0c81-84f6-61c375bfeb97
 28 20821fa4-0204-5d81-9b61-9c153d91ac40
 29 ffabd65e-2b64-760f-acaa-ce043df70957
 30 1b78f144-457a-3efd-ba39-d32abb8d9f33
 31 389b9f0a-b6ad-137e-9de7-00df80517686
 32 714fba8e-4be9-0f8a-b100-b9d3a90e2aca
 33 19914678-9e61-27ef-94a6-83d589cdc7ec
 34 5f97ab4d-dbd9-0a2e-84f4-60ac470404d1
 35 909d5468-13b6-3978-8458-77d15f09eea6
 36 083f1b25-7f4c-4273-a7ae-8553000d0100
 37 270e9f97-305c-6b0d-8b4a-1701400132e5
 38 2f25b654-0f11-6284-bd4e-446073382666
 39 0d6faa95-7c42-4544-bb0c-7b08c4a1e07e
 40 9f75321f-9f73-0e3c-a499-4b90a5630d82
 41 121a1ee9-d5c5-1439-8883-dd23c964d2b9
 42 3cb01d51-ede3-5d90-b176-c1557eea27c2
 43 582228d3-8fdc-7ed9-a3db-5b767d657ea5

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3240074471671206404708372005731020346640157. Exactly this sequence comes out of new Random(363).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 22 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 43; the post has N = 43 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results