A858DE45F56D9BC9 archive

201210032101 10wpvd

explained decrypted filler

3DES(name+title) ECB, 33 GUIDs, seed 233

Metadata

Post ID
10wpvd
Title
201210032101 → 2012-10-03 21:01 on A858's clock
Posted (UTC)
2012-10-04 01:01:41
Timezone
UTC−4 · title 21:01 against posted 01:01 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210032101) = 8347e9102161580a63c5b95614c97120 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
33
Filler GUID seed
new Random(233).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
123 · predicted N = 33 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

5F70FB457DB70AEE D2831A00AF805902 9EF58375BFCA1DCB D051B1A98617B1C4 EA7E01BFF60FAF53 1BE7FE5246CC3EAC 8D32F4198EDD41BA D38CA6EE58A8CB88 811F55EB4680B5D6 1A310D6B26E146D8 62E65121366A5085 5DC6EAC8821557B6 9285DC77E8B32EBD CD817EC0886F3113 80CD11823EA6A4AB 83D4816879CEC01A DC70DA3833AD6ED0 9836177DCC27A57E 8645A7581FB492C8 0F83CDA577DBB443 E6B376DDBDCC24F3 A2D1A6916A314043 DB359C83ACAEC163 F854ED493ED4F5EE 8322C38C2709131B F5A1853EC1A7F8DF 27187CC5D8E83644 33D426C93E47584C 67A2CE4481309B48 DFE52C18F0AE6E7E C89A648AB4FF7D97 A62739B33CE1C0D7 8A576469409B3AD4 577248FF85B3BE04 69BC161F4AC31F8A 2E6A3091A2590372 C13DF128594662A1 2EDD63D97AFEAFDC 75F92B3C4D46EC7F C294F31A8BB30B71 1044A901F33FE341 1553F2A3D7A7C5B9 53FF9B3AAD8B6002 C04A747A5D1A8A39 0759A67BA237E653 D77F1A8591A12E0F 23FCFE5E336C28BF 277C3AC7DF8713DD D60DD1B401E465E9 EA09F54A568B410B 1777D6BF51C73523 D800FC7176261F7E 36488706FDE50EAE F951A0CFE97AD2C3 615A3FDAC6170E57 3FD9A36B2C5A013B B5554D4F50AA3D84 1957B88713B4814D 6A38CF5EE9686EF0 80B4DF44C8CD29B7 EF79DDAEDB4F2228 BB55C7DBA1D89926 7932BF5A8701F6A5 E2C6794F9E40CB55 8FC5FB260B8CACBC 548F91DFCAE5AB5E 52CEA80714738F0A A1D18BC9372E3D3B 9BB49A04D9E36C8A 99DF4456AE26C0E7 C657241B0CE79AEE 3A95CC1429B878D0 5B30D519BD03632C 58B1047E62BD59AF 7042F8E87F78E214 F06B9B778748A619 FEF6FD23FD4AA9B5 416DC21BEBCC6005 FC17C92C33A24E55 061505BC8D7BABC6 5FB5FB73416D7C41 D307819A849AC687 DA62E1EDFF9DD9B9 A7424133050876ED 969E50F0E31AC6F6 E47BB01D09A9B10C 5B27D47456C0A255 354A02A34FF66A23 7DE67D7B473DAAA2 B9BCDC770B554970 ED8E5C8F9E1C07F9 00E933815F3EA348 5ACA7F247D5AA71D 4D449AEFB5125C72 6AA7FC04AE069938 A7C69489A39B9B1F EC186CCB28135725 00661FA4ADC51755 E1152CBD1635929D 6A9211AAB4CDA646 A97800791678EEA0 EF0C147E9F61AF8D F61BAA1A29DB44FD 1D53FFFBBA9ED0C3 7C5411A43C34CB20 3E068755C982B1AE 5F61EB6CFBA9040C DFD48BF687687F98 83EE0641FA410281 3D2C37EB9A83CAF8 FC482C8D0B46EC38 C038F89D0CFFB3DE 7D7E3011D6879B0E 67423305CFC4D9AC 53C651DB9CB6A6F8 03D8B4252A94342B AA5E6FE0CD77A702 5D484A0DDE0523D4 4943F78F764AE9FE A5730CA7886DE3AE 585C07E49EFC6C2C 7AE7338D1193D54F 18F47B530EAF6E0A 527A0BFB1A020111 E7BA0F581C854B92 D57D53DD2DB9F5C2 3DC0B7BB38BFF221 817F0613D8EEE610 3A86B62250E47A9B A2679F18A0F40626 F7D58DA81C23F7FD 86EC4010332EBE89 65A10D5223BBB5BB
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210032101 (name+title). Key = MD5(password) = 8347e9102161580a63c5b95614c97120, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d8937810-8321-4080-9fac-3a082e6b48e9
  2 aa79d633-e813-1f10-9857-20c8b9463170
  3 12aecae1-b093-52ef-be82-91005ac14e51
  4 3f892cc7-5994-20cf-87ec-4bc041559bee
  5 d31071c5-49e6-3725-99e3-c599ff405114
  6 48a9abcb-1598-16c4-b976-e8a72869577a
  7 f30f6799-83e3-2530-a98a-0492cd724416
  8 2002e6a2-b44f-3c85-8c4f-bd412c2f3bfb
  9 e4b8be0d-8ae9-7da8-9bfa-8d63bc556a32
 10 2fc2dc55-f93f-1de7-a21a-8159e1b05fa5
 11 7e8637cd-9c5b-8e12-9fab-03c960fab184
 12 71ab9160-1b56-3aa1-aa57-4b675453df3d
 13 27884076-30fb-73ee-a2b4-b1c9133b7891
 14 0444bc53-ffe7-63d6-9836-f4ab665d07ca
 15 c7fa23a5-c688-0582-9c35-90611517b99a
 16 0b964f31-8cb6-42f9-8a57-79eb48cb77ca
 17 cce656e1-bc40-7100-98c5-60885bd2d5c0
 18 3d865fed-1680-4526-956a-cc3fefad6e96
 19 827db041-b7f8-8ba2-8964-0e729f9a92a8
 20 3c30d8ac-cdf4-41ea-a770-d07680ebb298
 21 cbbd9215-505e-64b0-8daa-a19768fd2297
 22 f2d916a3-f11c-0217-8cce-72181e41ea51
 23 0bb42cee-2bec-3a6c-9068-ccbc2c7694ae
 24 c1935531-c069-3910-a1bc-2ff843b933e6
 25 b8c1159b-0286-4eaa-9f38-dfdcf9947439
 26 f969e365-e46a-3421-8d7d-69621f9d6f1c
 27 cafce24f-7603-2514-97e1-eef3289ebbd6
 28 aa961745-23d4-0190-8fe2-f8d6af77698f
 29 97dad269-e9ff-8ecd-9fea-8ca9ee18253d
 30 08438198-68e7-6840-aa70-73dda67d63e6
 31 8bcb6fd9-b43f-1c16-91c7-c3a01f8956eb
 32 f61d3014-b908-7929-9984-c809e3fbd59a
 33 1f74665f-cc2a-808f-b87b-3fe79e9e0648

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 415231237183760474846033432086178. Exactly this sequence comes out of new Random(233).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 123 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results