A858DE45F56D9BC9 archive

201210030541 10v8u8

explained decrypted filler

3DES(name+title) ECB, 26 GUIDs, seed 264

Metadata

Post ID
10v8u8
Title
201210030541 → 2012-10-03 05:41 on A858's clock
Posted (UTC)
2012-10-03 09:41:08
Timezone
UTC−4 · title 05:41 against posted 09:41 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,680 hex characters · 840 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210030541) = cc8ebcd5689fb77122a7d6846c9ecfe4 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
26
Filler GUID seed
new Random(264).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
77 · predicted N = 26 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

24B600A99CB79B6B 69F7282D7AD8D4B8 D5DAF484EF465284 A97F38557B82D487 934A1A5E6DA36832 450BB62FAA79F55C 1283B9F6FB1BE49E 9EE72090483AA1B3 52E2A1980B576353 89C497B503598539 8838D74B39BD5AC9 C7C9A3B27DEA10D6 9532C082F477E55E E4BE538AE546B3E8 C37C9CF568DDDC62 0160D915DB6ED388 FCE579F9AADB067A 576A147EEFE47FB6 108F3D61CEA4400B 516955408FE8CBE5 6910B73F9B4715CA 9AA97AB3CC69545F DA697CAA3F0DEADE 307E4847F954CE6F E895DFEA659CEC29 3E9ADDC74ACF6BBE 98F5F8C3E6920ED0 12DF3973BFF01518 0333D20355BDB4B9 D48446625A029223 3526CFED12A1A38E D5A415D3A174D996 C08D892503AF1367 0E05A17F44D8D192 06AE1F2B53C85AE2 570A989C15FC14E3 F51FECAD422E72A4 52CD767A1333975E 73A43BA676244027 E111267D2BD9375A 28184E86649B0E72 A7A348563D87CCCA 296997573B256ABE 9C920634B7C8EBF4 B33472788275ECBE F14A4475B2A5DB3D 0BF75790D82EE7AF 3872E0C4864A5F1A 5F2F75982668C145 D6E5290B379EC601 4682D9488953620F 74B83A5034654F27 061068AC6229E6D2 7F3F34F3A6716ADD 5CCF2840C5B0CD9C B9152620D65F2124 0FC521BA037B073B C509F750C6B97AA8 67A63832AB8F2C23 5322BBA1991EB338 5D3CF9B3602389DB 92526F15F8576E84 F929F7CEF23B46A5 34CD6B18A94B75DB 1FCDE5DD0711DD83 C465442345D97E89 BBC41CFBC01D0642 21C3C33089A7FF29 73E6A5C16504E522 F8348BB9FEC900E8 68ED02C0805DD463 41F2F0DC1BE2662B CA2B537D7D981E27 D8356166B5033E07 835A3C2A6C6650C7 A251C680E47C1537 757340E51F8ECD11 DAE904F98BC51294 74E12F3CB047012D 934DB1551E2DE64B 72CF8B9FF3617FD1 58213771E7C8CD26 7674B8DF0E6D310E 3945DBDF796531DC 3A070206F6C64576 E1E1A1F235DF89B0 70E3E36360117FCE 26C22F08FA71716B 16D8DAF00E8380F5 D95A0A6F8E669ACC C2A10892B7F53116 F1B577CFE57E14BB DB873CF1FFAA1600 A01422DA4D20A162 CDFA6D8CAD34FBA4 10D99C9084C087B5 87630ADE80E8E3C1 92A6A38D718892DB 7727852C75E17FCD 8E2DD508670C0A44 6AF7781C935C985D EDE5FB870A0F49B9 7FEC4E985C004E09 DBD905A0080600C3 E73D720C2CADC9B0
  • Read the ciphertext. Strip whitespace: 1,680 hex characters = 840 bytes = 105 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210030541 (name+title). Key = MD5(password) = cc8ebcd5689fb77122a7d6846c9ecfe4, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 26 GUIDs as hex (shown below).

Decrypted: GUID list

  1 736bfebe-184e-5ad7-8743-33a55183a136
  2 9737bd16-3e4e-2e7b-92b8-0bcd00ac36f5
  3 240a43a8-d7a0-2b89-8253-9be327d60ace
  4 9c747aa3-4e45-8622-8b7e-7646bd3da1b3
  5 f0933c8e-7e4a-3eec-a88b-e8ea5fb1afb7
  6 d0645053-bd83-2e1d-819e-56b76eaeffa7
  7 8fcc6b43-f9cf-157b-9ca4-676c0eb2941f
  8 20917d74-d908-745b-8ef9-10545f4b6966
  9 6fa78969-87e2-58f8-a72b-dd2c739c3601
 10 199f284e-76a1-56a7-85c2-071861c2df3a
 11 19f21206-99b5-7173-b556-d12f14fb20e6
 12 f6b2fff7-b594-5c82-b702-3474f9da0aed
 13 af1bb48b-b89f-11a7-9fd6-078ae83f2268
 14 959b4b22-df2b-711f-b6ae-cae8ba3037d1
 15 2bcc462c-83fc-6732-bd16-e337232e2f34
 16 caeb0e1b-55dc-8fdc-9012-a7f8d1847ee7
 17 d4e89095-903b-7181-9c29-33bf92845113
 18 de5e4a86-6604-6680-82b2-0c63273c43d9
 19 afee9293-0d48-78bd-9af6-08998c1a2d5e
 20 ab2b230e-4b41-4dc8-97d2-6d7ae234d0af
 21 ae71066d-e3ee-8b61-a800-910c2e4ca8f2
 22 370b3c6e-a59b-5c84-b75a-7c3a589ac98c
 23 8f3df418-cf14-56d1-9b84-d0bbde1b9049
 24 dd57a494-90c7-2119-b2f3-9a7e966bcb66
 25 3f0d172d-521b-5fb0-931b-58caba2c720b
 26 eb5f7039-c6fd-2505-83a5-574a521bc12d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 52283217557517687674855252. Exactly this sequence comes out of new Random(264).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 77 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 26; the post has N = 26 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results