A858DE45F56D9BC9 archive

201210041602 10yc7v

explained decrypted filler

3DES(name+title) ECB, 34 GUIDs, seed 83

Metadata

Post ID
10yc7v
Title
201210041602 → 2012-10-04 16:02 on A858's clock
Posted (UTC)
2012-10-04 20:02:27
Timezone
UTC−4 · title 16:02 against posted 20:02 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,192 hex characters · 1,096 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210041602) = 35c1f339c7e88133b9f9b3224cfca755 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
34
Filler GUID seed
new Random(83).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
180 · predicted N = 34 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
10 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

C1A4CB0A582889D6 8158C91C158EF68F 92095445DEE8C5ED 16C426D9733E8949 E5287B2F226AF58E 5E7412E29CC5FEA8 0DB67279DF957BD7 5ACB73F24C905A96 D8EB0211CB8F0577 D2C3DDF9DE54364D C8DEB444F7A3955F A93219CD31D36186 12EC7ADB66E16EB0 226098146BC5658C 03896D0109083C5A 14B8E1C5CED512DA 4BF13ECAC79D41CF 6917AEAD39B0E863 1528E4EC4894D88B B2A36533F834563B 5B294049FBA00B9A 71E415701C719DC6 BA069952ADF6B55B FEB2C49272B37A56 661878CC06176BA7 4DCBCFC7F62DFED4 D0CA4A30EDF252F0 7B875B38A7D79976 EF87A2D96E05FBB9 DA1DF0D9D6760563 3D75FF358E81B27E 4ECA823FEFDC1717 291CDDB93C38A7D1 263C3C6C92552BD8 2C8B21C9AE8B24F0 E6ADF461930A962D DFA3FEAD91198A0A C6F6794FA663C9B0 EA0C5EB88D176559 4CC00101A2E964CD EC4ADC2A4273C637 042E0ABFE0106C04 5DAB8E4032C8489A 17913E1864F2E804 9F1754ED763642A9 8BF9ECA9AE6F88B6 2188661EB6159DC7 2DF983DC2C30E798 3091A95962D6FC3C 0886659567F21FCA 407AC9E20BF0B8FE D72BA06EF591B895 B4011D1B3F4444C1 05F6EF6568E0559F 42E1575F32FA9108 DE29728F336D55F7 36B6C50FACE43D7C 456D3DE6E7A7C160 87ACB8B7FBEA25E4 063E255D41BF4CF4 CF7BB36392B510D8 482776DD7E595BA0 4A4481B83060B8E4 2E27DE37A4D925CD 1B37EECDF7FD720E BDB4913C11A2616B 33F28AD30DD62664 F26631AE30045921 D3AC8CED2CD87080 4081B7E5CB6EF076 8FB1F54CE2DC00B1 1BEE9FF980E737E4 D6ACAE79C0BC3C08 D6693DC3A8620BD0 ABF41AFF95FF6F15 9895168AA2EE00B5 D4BD6D866A50763F 80962A4FCD438BF0 FA1E17EA2D5BB20D D0520AA225DD94DC CF01AACE49D015A4 2FD016E7127DE9F2 7792EC26CE6E5BE7 0C43A5DCB1591BCE 22BDB5919EE41939 2E6555CCBC492DB9 AFDAC9B094183010 F079E543FC394010 30886726BDE3124C 907F3CF4F37D74D7 EFEEA4982F995E88 D882F55BD647B87D 84E62E82BF7808B4 CAC3FFAD6C02DD56 3D02C87B2FEDA5FA 67F3971157521A1D BFE78551288A7FAC DF0C19B1DDC1EE3A 66008A9780245723 54015424C3E934B7 E855A47178A1F06C 88916A88485176D8 AAE52BED85579AD4 474CD03848A371D3 A6105F2CA68B3196 83B04E55755B8CCF E4764CA24EF9A685 4D2DB6584637ED09 6A041CE2EEB9790C FFB63FA580B11012 C43809F79CA2D12B A9B3ED6F84BD0228 400429118F88631F 616C6C4E7193EFB8 6046365E01C55B4E 66481F884804E663 8FE28FA6A91B1F3E E9BE0B317225816F 4FCA6B457A44E899 876821A22CF63927 58493A6D0B818ED8 B75B8177D841AF3F 465E146D7D772B58 6C529B1E3EC0FC95 FE49A6D9B1778C34 66B851717E3759CC E83B17DD594A8189 47947089A97EB32E C68714DF32759DF5 90B471D72962C7E6 0A492F786D5E1D7E DCCAD4C9A32064D6 61A13C18296C05B8 D1686A39F2C07B57 B94463873B596401 B26166025D989633 4ECD69D6D683B5F7
  • Read the ciphertext. Strip whitespace: 2,192 hex characters = 1,096 bytes = 137 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210041602 (name+title). Key = MD5(password) = 35c1f339c7e88133b9f9b3224cfca755, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 34 GUIDs as hex (shown below).

Decrypted: GUID list

  1 2ef32f61-dc66-082e-bae4-2b351f17dee7
  2 05cd511e-3027-1442-86aa-3d2b0aa298e9
  3 ef6550e0-bb58-7102-b9f2-b94de64b144c
  4 26c39c70-ed85-2822-ba39-cbf41aa1e36c
  5 a190510a-9725-66c0-bc88-429c18b52230
  6 c24f452f-0cba-0e14-9ba0-bf5476939ff7
  7 94c5236f-1a69-01df-b0f1-038bb5adbab4
  8 a5fcf694-f2fe-01cc-80be-f9d20a2e15e0
  9 fc0ffc0a-006b-2fef-a3e3-9a2a7627298e
 10 36a07372-c694-7eaa-9d48-3309c35acf7e
 11 ea0e6a83-5576-3b19-b9f2-d9b0a56d9217
 12 9a8c2824-ff39-2ac3-b3f2-3abbfc4b8d1f
 13 46049c53-ce67-6be0-b6a5-fcdca776a363
 14 52b913aa-dd4f-5c1b-beb1-5413e79c8dd7
 15 757759c5-40bb-0143-aff6-c921b9c24c8f
 16 2ec6f93a-bc37-704f-8103-449a95bc3c7a
 17 7d8faa07-b7b5-6a96-a0ea-4c6ef416989c
 18 0844c9fb-89dc-4334-8928-8eec2645a6e3
 19 95110a35-ad8e-86c6-832e-33645ad1bb92
 20 bc3d2db3-5362-4c9f-82ef-5e12c57ac4fd
 21 ea3db6e0-6422-7d37-9e37-4c13700a6d55
 22 2b96041a-1124-1589-a3fa-a675a8fb4f7a
 23 a3aa075f-fbfd-0834-ab34-918e7c63a584
 24 2f41f98e-b43d-00c8-9640-7e5a590a80cf
 25 c77a2ba1-5cac-7c51-8c80-ad1aa0d6121c
 26 5d57f1c3-ffa0-8ce0-bc71-6d87e4b3ec11
 27 66ea2964-6b15-2741-b13d-159eeb547b03
 28 0c7cd6db-ead2-174a-a482-23dc955de4f7
 29 b9c1c110-a9af-47ad-98fd-7f11ead5e947
 30 40075955-446b-810c-8480-f984dee82bd4
 31 1a6a0824-e211-70e5-b8e6-2b84765eb0ab
 32 da731c0c-fa1e-22b6-86ae-46bd527ab13b
 33 d35d6199-da40-64b6-985e-a79cbfb04f9b
 34 85f7dccf-a8aa-0f04-80a3-cb79ef9b1c20

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 0172600027326507648471007821487260. Exactly this sequence comes out of new Random(83).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 180 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 34; the post has N = 34 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results