A858DE45F56D9BC9 archive

201210030941 10vgvh

explained decrypted filler

3DES(name+title) ECB, 26 GUIDs, seed 956

Metadata

Post ID
10vgvh
Title
201210030941 → 2012-10-03 09:41 on A858's clock
Posted (UTC)
2012-10-03 13:41:16
Timezone
UTC−4 · title 09:41 against posted 13:41 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,680 hex characters · 840 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210030941) = 8ecb1896d2501a96f9f5cc492ee24fb6 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
26
Filler GUID seed
new Random(956).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
89 · predicted N = 26 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

11C002602093960A 657AC7625F47627F A8196EDE461C3CBA 855E389AC7A52E4D 819E97CA4E23E9F2 6B15F2FC609A1B82 27572958181BFE8B E3B69E06D6CB20C3 EBDEBDBC5C666840 6285F2D3A31FA5A4 BD3048BC51257339 FE28D0AAF24B00B3 78F9C6CCEE11D563 BF993A8FCD70E225 117C51E7ED812F1D E544107FA72A598F 4B814D101AE74379 9346832D6EDB3396 116ACF0DF0395043 84498BEACB9357DE 0C36B328C16E1C37 8CEA2FA4040AF326 9ABC92E21B80CA82 4E684C4421865ADD 36880A8CC3972441 44F5B4E7CA882C03 A5B6D39A0EFAAAAB 0900ED2E7A8B34F5 EEA76F3EBD98100D 8C7211940DB3EBD3 7540D203E9F7BC90 2BCD8327A1015B97 A5BE82C78C63F33E E673A518BA8544D4 6D7A42D8EEB1030F 254721CBB8D1A967 882C1B498047CEAD CAFD83DB78D2F39C F679A62F97B56BF1 20352A7F0B2D4987 D421232FD1B0D845 367EC23D7ABAACBA F3951DDE10C7774E B4D165446216F62C D93AE5CDF2815ABA 6AFAB470139661D7 73755273099D5507 4B4B60B1BF52B6E8 F3D1240609B042D4 01C51B5BDF8D6C64 3534A25F045D3279 AE553C59F92BE90F 0F869177A99ED96A 546836F89D523FC1 A2E76CA5A8FD7045 9CD10ACD488403C0 C83889940C8D62F1 C4425104E01E6DD8 4D73C96F3EEA1375 280AC9AE2317B2D3 56F99C8D12D90386 D23381DED8DDB30A 90FD661807EFFC41 14F93E4019C9BC84 CC379F6FAA4C551C D1D271E44925B8C4 61E12F52E09B8634 3EC1138C144D2D40 A9B13965939C52D1 FFC567E4869F8A06 CB11F3AC5D52C5DC FA6FB0C7FFD4DD83 750B48612E654496 5250D5C54FBCC721 461551A9967970B7 F5A7F748115E7B58 0E8CF1AE5EB99F60 4336508824A04DC7 F7E0C46E24655A58 5A5E304050C1BCC7 C9707499D2AFEB5A AB0ECF082F42D44D F3269EA6A8EBF12A 5AD928D4339AB7E4 9FD1CF00F0BB51B8 B40928074B12BE3A 5341059F3C06B86F 6FD19168B0900241 9C7A7FB6F7826E54 187A43A43922C555 BCF56E2B2ACF961E 291C9C16F350D717 F2E3B1BAD637DD9A 440D6BAF6E8BB40E 9AC8B7159B02191E CB19C24A53FE0529 FAD90FC593E66C87 A1E2F66499390726 7B12D9AF645C0620 1105AFF9035C3BE9 6823AD6EAF379058 702654BC7AA4B835 7A1C26F073E1ABC0 F501DF55123D11AF 93F855B48B892587
  • Read the ciphertext. Strip whitespace: 1,680 hex characters = 840 bytes = 105 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210030941 (name+title). Key = MD5(password) = 8ecb1896d2501a96f9f5cc492ee24fb6, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 26 GUIDs as hex (shown below).

Decrypted: GUID list

  1 1ecdc01d-e41d-15e6-853f-9f7b8243cbeb
  2 c48f8923-211c-2558-a219-98a38d8529a5
  3 9479e5f9-1b12-053b-a702-786ca1d42e54
  4 afafcbea-723d-504d-b991-7da60e1918ba
  5 3ecb03b6-0c5d-7080-a0f9-00705e851b1d
  6 27260e47-7c77-0000-bc6d-adfa6c398108
  7 7eb4478b-e891-2252-80d8-48a496cf7e38
  8 4ab57069-23d1-0689-9206-c870223b5774
  9 b12083ae-1c6e-20ad-9bf7-1bc9282e7c50
 10 04d88f6e-99b1-7713-abcd-2fa223ea3569
 11 6e049e92-2a6b-5574-b04f-25b01c8abba2
 12 12629e03-6a45-77da-b5b0-cd01b8f4a0bd
 13 15bfb4db-6b0b-7079-a1f3-e45443a991cb
 14 2a8dff9a-4e3a-7469-a27e-43d9dfc8b773
 15 6a19860c-69d6-145c-938a-637191e48e4f
 16 180b5a74-0b6d-0e57-93cb-a5c97c06360d
 17 fe14542b-dc9b-668d-bcea-43f705ee7198
 18 d630f5ca-3577-6b35-8569-60b3934a2cae
 19 adbe93fd-0772-5bd7-8f78-1ac3b3fa599f
 20 5a6d3069-bd19-4715-b839-c708a32e8f86
 21 30317c6c-d10d-7ccb-90bf-bad01a9004fc
 22 614a2391-2106-3446-8538-bb2bed6ab1fb
 23 0f6e3f08-e0e9-575f-9485-0160fa6aa6b2
 24 97ea155a-36f0-00cb-9f4b-312618ca8c13
 25 d4f18fd1-63a7-300d-b948-4d0309960e1e
 26 d9bde07a-a99f-38b4-a9ce-64f83b968f1c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 12057020275777106654735033. Exactly this sequence comes out of new Random(956).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 89 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 26; the post has N = 26 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results