A858DE45F56D9BC9 archive

201210031721 10wbba

explained decrypted filler

3DES(name+title) ECB, 30 GUIDs, seed 53

Metadata

Post ID
10wbba
Title
201210031721 → 2012-10-03 17:21 on A858's clock
Posted (UTC)
2012-10-03 21:21:31
Timezone
UTC−4 · title 17:21 against posted 21:21 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,936 hex characters · 968 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210031721) = efb3c16acb6f9aac30afdd878d983d9c (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
30
Filler GUID seed
new Random(53).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
112 · predicted N = 30 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
8 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

8D6103E7BC9B9EFE 98DF906B6B1A6DCE 01C1A0026100C678 79D30F299B2943B1 0B9D1424520A3E1B 0FA3246F1C539B9E 71E41B337FA21154 3EC0F8A228F6B068 80732EAD6EF1C949 11F18F58CFF96F3C 5334C3D33C102BA1 D2B98655126520E8 8A60FA830194A581 CAF2FAF41AEC42A9 234EB790D73256A7 A37335AE256B96B0 3F777541762F4E1D 3C01CE71D7506ACF 72ADFEEC6900BA8F 95D3A49FCDDB40E4 3D1F98424B35A40A A0580339EDB30AD6 B3D4B55D9CBFB6B3 1CE83FEFE038B67C D3A89A9A019A6D8D 66892E464B295C42 6ECD26D4DCB72E0E 0371A20447E2CCD4 53495EFBB83FD3AB 90F037A7E898665A A63038E18F7B06FB 971E2D78E92FB245 2803EF6D81DB01AC A4A1246AF1D69D97 64DAF1996EB179F6 6CBFC7CFC10E3629 68750639DCC6F681 BDE980F44C7262CF D315F90A1466FB5A 387ED852A6D15B97 FE473B1553A3BEDA 8803CFAC82DD70D3 DCFB65EF8A61FF5A EAEE66BFE2012712 9ADD82C9404AEF3C EAFD08B692F87045 05D66FA523BD043F B454BC68BC6BE90E FC75DF08477011CD 054ED5296C82D3F6 729D404879C9DE4C 375B8B0023B58D63 77D1084FF27DCB90 C09E17600B6DC415 CF733361964A5146 218574C30091B581 38E5B1875FA5BA22 8D5AAFA10FE441AD A8A4C819D391B003 37FC78B8898F3C25 03290B3F2CE5A1A8 E9E1DBEC84B5EBDC 0DB7F9148AAAE8EB FE7FC2502E32BD71 C95D69BDC5F80E3A E418BFC0618A5162 CE5A13B9D0AE64E0 AA9F72B8B52067E3 B9372898D9AEFDA1 843D964AB5983865 82569FBEDE4D4E85 1F29F2F2F125E585 E2E00E07FCF1F52E B9B74543F40CA704 146C45C7A1FD9977 8E4B45DC28CAA2B3 D7419E0EB882450E 6E882F4BFB2945ED 54014DC90243D05A 98A808A67377BCEE E95585D1BD54F68A 76DC75ED64C6FF6B 22D807489C675FB3 212625CB9F5EFC2D 992EFC5EF04218D5 11739BBD86B14A3A 49EE0DC8AC47B684 AC0658BB0D035180 88931AD65A91EF58 5BC0E44203E058DA B83846E95493B362 9C18C4A2642028A1 DB351C9496E349FC DEBED02F0DDE1A55 E1D0E869677DA650 8ECCF46927A35EEE D5C3864BC3902C0B EF6F7D1C4F9FB1F5 B3A80A5C198AE7E6 A6AB5675B6C3274A 207A45B6AD896740 29594689E40CD4A2 166194C8316B24E3 A274436B0E6C512F A1F428C99FD38C70 982A99EAF8101DC5 DEEA6987019F8976 595F5456EBC08E06 42CFC089F745043D ED8B28B75BF856C9 5136121F039CCAC0 4DE0AEC6DF34578A BCABA8DDB819554D D94982FF5CAFA966 9EE5FC7A2EEC3DDD C4D21E1B5FA6855E 7A00FC8CF4E982E3 E0AA07BDB7DBE660 D34A6EB50E886F40 548350E8201E3BAA 6F15CDB1542F463F
  • Read the ciphertext. Strip whitespace: 1,936 hex characters = 968 bytes = 121 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210031721 (name+title). Key = MD5(password) = efb3c16acb6f9aac30afdd878d983d9c, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 30 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e0d5f87f-1ad7-3eea-bf67-38a86b877936
  2 65bbc4b6-737d-3338-afd7-c0176f0201b6
  3 ffc4c7a0-230c-78aa-ab92-cd77414e3845
  4 22b4fc26-1ec7-712d-82f6-473392faac14
  5 fccc3996-1b58-1d10-9b58-195db1a90a5c
  6 a95b84bd-6f63-762d-9c60-cd316869b141
  7 493cedd6-7262-59de-bde9-8c5b001359a3
  8 2c78fb4e-4de3-02eb-87e0-952476cb2f5c
  9 8a48e004-4c85-4010-af41-3c6630cb32e7
 10 38f1ff91-4e24-7851-a03b-8c581c2e06e4
 11 f1abc582-2dbf-364a-b48c-332292480e81
 12 994a1b96-8740-7d8e-8cf4-3bacbd316754
 13 ff285fb9-e4ca-0a80-b267-f41d27afc83c
 14 9cbf0546-ff96-0ca5-ab39-2e4f9df2db95
 15 11a11920-531b-0d9f-be68-6c0d3bbc9b85
 16 2462491e-d30a-1cca-abbd-6f7806d570e0
 17 9450bc0d-800a-1886-9e29-7388c24c65b5
 18 99e92987-c890-72b0-bf9f-630b13306821
 19 011a050d-3353-154e-be10-1dddcc652a95
 20 e924687c-b9a1-7ba1-ab02-3d07c2b97cd5
 21 2fcddebe-affb-7f51-bb94-499d860feeed
 22 4bcd1b1a-15cc-7404-adf0-9c04cc9ce62f
 23 d219b4cc-0dc6-80cf-8298-4cee1a708a27
 24 aaf36ab4-5df5-4fcb-9cdb-8f4c4b7181e9
 25 80cc9703-b98c-8245-b0d4-c47ed000aebd
 26 6d2f9898-14a3-5d45-976f-87e5f0fa1646
 27 f6d95cf7-efb3-40ef-b892-a29f8e58a1e7
 28 e658525e-5481-4d7c-84a7-1de37561df45
 29 3f400728-6d9a-182a-89d6-817d699458a3
 30 40ed65e9-cd69-614e-a465-d3c23dd5ad9e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 337717504737000117177784854416. Exactly this sequence comes out of new Random(53).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 112 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 30; the post has N = 30 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results