A858DE45F56D9BC9 archive

201210031621 10w74e

explained decrypted filler

3DES(name+title) ECB, 25 GUIDs, seed 208

Metadata

Post ID
10w74e
Title
201210031621 → 2012-10-03 16:21 on A858's clock
Posted (UTC)
2012-10-03 20:21:29
Timezone
UTC−4 · title 16:21 against posted 20:21 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,616 hex characters · 808 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210031621) = c4f4bcfa4a33316e567633434b9e6c1c (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
25
Filler GUID seed
new Random(208).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
109 · predicted N = 25 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

75EAFE92218ECCCE A403525630D237ED 504342461EF661B4 6A4A832705C5DF3B 099297E253BD93AF 7B57BF6506A29D26 48ACE797B67389B3 E4E55ABEF4AC4D77 851C6D96F414C3CE 36CC9B37E2458E24 468B7C7C9559820C 48FF7956AA58AABA FC77D76CF4D2E087 ECD05A244909F795 27E735304343D2FA 979DABF65DB0D0BC BD178D3D92AF3362 BC9B235CC22FEA5D F3EF5327700A271C 605B8ACAE45ED9B7 94FD1AE19E158455 9127B1D7AE7514C6 424D88DE3300C0C5 C6B55C268234BAA2 61C13805E25B00F2 C730DF1844BE5BC1 5879AE5862E29247 2E992C67F14F0164 5D1D468A157703FC A004F28A0DF0C59F 150BB683D5A81894 C782595A34E70CB4 75196B4F4CECA200 A7E372FA4226E897 8BA277E44832FCF7 8FAFDC84E3CD2289 AEC095E974648D74 40645CBA076BC0F3 8DE1FF904BA844D6 93F461E8932D2DAF 1F789CF63F812293 B2CBC45A4F0C1585 FA96B640C722E834 152F155DCE9EDD6A 1C0A0F6D5D59E752 867FEFF3B50E6DD2 902CA3B2955BA0E3 B28E20E230987ACE 59D904918475BCEE C30B34B53D93B7E4 B037EF20D9AEE72F 6F985E3B4D3294D4 3895292BB5CC4767 F7A94F9649647B0D 477E186B29A975F9 8EF185E1A63DD3AC 00FC09566A177777 FE96DAF1C9DA20EB 62267662E8039BB1 E8531D678FB4C368 A8CE31E345E2AEEC FAEB64F7D7B8DD86 2B3459AE5AADCDA5 06CFB0C08567A81B 7A404CB1B8895A9E EB83F25819FD9A68 082BEC596C6F06E7 BDDDC7610091B6E4 96D22CC069722CE5 143F8C74DCAF15EC 6C8BBFE26941BC2E EBEE11059C86F00E 5169AD56D6BB71F1 105249823934640C CE0A723BF8A0FF6D CE883D940E0A1673 208B9DF22992EFDC 99653DEB61646778 FC50E6D596A1A14C 84796B7581492B4F 95C1996D19A1DFC5 28B20FD0A1AC33C2 C81A2E842409C27B 5813C5A8DC253E42 ECDEC3A6982F1FFF 503FCB58DE77123B 2B81022AB51AC3CE 35A9B11E6779D637 4D15A21D6FFB8F86 6B1883AE0B9FF2E2 2FBD878A46228978 96837BAAB9A478DE F45C63CC88C6B0CA 62EC2FC43514736C BBDD9F5B8B6A0574 77A69639764604A6 6BBCFE4F0153FC07 962D595B92078B38 19056ABF3636BCD2 137A50866801751B 37B7C604785A2AE4
  • Read the ciphertext. Strip whitespace: 1,616 hex characters = 808 bytes = 101 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210031621 (name+title). Key = MD5(password) = c4f4bcfa4a33316e567633434b9e6c1c, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 25 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a2722055-23e0-3fd9-a45d-3bd7f4d48314
  2 8be10700-b8b8-76f6-a9dd-9b10b62c6682
  3 9cb5a51f-8c52-108b-8d3e-ebb95cfc684f
  4 de6709d9-03b8-8726-9abe-b0dfed25027a
  5 9bb2b617-de9a-193d-987d-606fcb7d6320
  6 552990bd-bb41-2045-952e-0eb61cf8b0d7
  7 85790c5c-c3e0-09b3-b265-520938dd5389
  8 c8103152-286e-7698-aad8-f3ec393a86ed
  9 eb9b5a0a-6ad9-60dd-96a6-3540967d01ed
 10 fdf0e74b-e3b1-8367-938d-9d7853f67d5d
 11 931f0cbf-aaea-4804-a405-853790f439f5
 12 d2eb130c-c37b-7e2b-bbdc-647e0d5a4abc
 13 9c7d3063-bf99-5c66-9267-2434a4bce4a6
 14 cb83c0df-cc36-6f7b-906c-03c102836f02
 15 f57bbeae-7201-581c-9922-390a66ee90a2
 16 89c66fd9-8e5b-8712-b87e-f93e30eff767
 17 2cf8b891-0b50-2d71-b059-663337fa4218
 18 7d63cebc-9afd-8af5-b74a-ee04aa8dabfa
 19 71adcb1e-44f5-285a-88f4-63448dd31a82
 20 18d336d5-cf00-7390-8023-e5a4001cc9b8
 21 0648cc9d-139a-4d02-bbc3-3e88ca421e84
 22 8c5d252a-aa7f-7fa7-9786-9946411c1908
 23 e96792ae-a91c-164a-9be7-3c7bc701caf6
 24 ac7b5576-8e46-6732-837b-8751c9000de9
 25 9fa1c90f-83f4-0e72-976f-f6fcf73385c9

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3718120768475658282747160. Exactly this sequence comes out of new Random(208).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 109 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 25; the post has N = 25 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results