A858DE45F56D9BC9 archive

201210052343 1110sl

explained decrypted filler

3DES(name+title) ECB, 34 GUIDs, seed 317

Metadata

Post ID
1110sl
Title
201210052343 → 2012-10-05 23:43 on A858's clock
Posted (UTC)
2012-10-06 03:43:47
Timezone
UTC−4 · title 23:43 against posted 03:43 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,192 hex characters · 1,096 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210052343) = 7ab11c5eadf88eec169f0307c04ab683 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
34
Filler GUID seed
new Random(317).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
275 · predicted N = 34 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 1
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

D7E619AEEDB93B7D C25458CA75754051 B77C7A27D46E128D 2FED6B6FFC7FD6B0 4A02FB664BCEB8B1 C8044ECF7049CBEC 8D6CD58642356525 88904DE124F36D42 8CAC260A05957807 45967A6C01F42BBC 4C5CA164A6D6C22B C00C0A673285E407 5BE6771CEF3E75AD F97F298EAE0C06C5 D11CDE41745EFCC2 18F1699CAFD156A5 0C7D125E7C37CE6D 8D5C84D98480B7AF 482B514165570159 020AAE242E3B344D 7F7C36EB1E7B6AD2 8A8B90FE7464DE3D 5FCB0795F26A60A2 F29F6B6FAA1D6D5C E719E2C65078B3F5 61F3A729FA8786C1 DFC445915E95EC49 A059C0D24F016470 9930E5F36E67F1B3 1ECA111B6ACE326A A773938A6BC0A570 21D449E45BD4E164 C3D9BB748C121F61 9A07FF2074EDA2DE 35456B2EC4624402 E0092BA7FDB445FA 880E519F2802FC50 A4DEAA3B0BF22032 67EC1F76ED6D13FE 93C8E6C0DD551C1B 8A57BEF089CC3494 504E2E00D8895B9C E5CDE2AD51E6135D 4E36988A1E576971 AED983488FC75AC5 A92E8B39D8B97B80 A43C7191A316A9BA AE7422D84E7912D2 019BA86F85C48E82 4F4CD1D8B9F54A85 3F621F284C11A7E3 C10CC7E09C13E9C0 2C869A31C964CDAA 28252C68CA8E83E8 FF5178A986F794FF DB641BBE326468E9 49B2CCBF28844904 2DB565537C24586B 93404AE75F176AD5 B040EBD68193D51E 69E81A7A7414FB0A D4A382B21A0DEFE0 EE5BB8E5DA37655D 755EB6ECB6E0AF32 E1444ADA9AA82E52 E32FEA39352C6B9B B109FECD62FED4E0 91F864DFF5DE16EC 52DDD5F856DDFF89 088B06EF6A2DA1FA 37A5922F2EDAC47D 461FFFA631B256AD 8FE8C2CC9041D6E4 0B6900B518862B0A FC3D73567F63A990 F7FAB31E9EAB7C47 894881A06BEFCEB0 1EAB0467994294CB 8C1F493A93E58B9D 1C728780B5A570BA 1B1938D963B17D89 302129DEC7936A52 5C92FA90FA2BA402 FC248248230EC292 5073B1F7265540EA C437FF3A0603E9A1 093F7B18972A2D54 E815EA0C9ABA5445 09BB7F77DF9C0C08 728FDD03DCB97A60 77AB7294C258EE46 B4FCCFF4AB67265E 1DB9A01AD9DFB933 98840E7A8DF17E4E 779D0875F1C77467 7E74CC15A43C92E3 820A3B850B151390 DBFBBB6DB0CD8C52 D54371BFBD2EF09F 82F8F6EC22D238E2 E37599326F7D559D C72BBB3DA8E1488C 7070B52D3493DA65 82F33B71FF4F4277 7FBE3D43E2F12AD9 054C7F2951D884C1 882D6BAEB9D168E1 5C89846F7D3BDC3E EC5D1DB6ED9254C5 FD56FE7F92F55C2A 1F4BD2244E0280DD 1FF3C1509A20F825 6F16596007B553CA E3F22213077DE82D EF13D6F438E4F389 B6F1F39E9683C9F4 1B4A0279214F69CB 6FA32DD62933494C 5E7BFDDFEC925F8C 12B8E419D8821366 EE9CC58B004FADBB 4AFA4221003E7F7D 78CB2EC502C18F67 608F21388CFEA226 BEC391C62F39EECA A214F8E0FBB4C025 3DE81AA074054DFD 77030FC405BEDA50 A849A3F5D77A475D F9D792E8284E081B 4CFA5146621262DB 759ADDCF510658AD BDC8B79947E41D11 2312124C19AAE426 F5E22A10145B1586 A883AF119566D356 2A34AE7225390C76
  • Read the ciphertext. Strip whitespace: 2,192 hex characters = 1,096 bytes = 137 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210052343 (name+title). Key = MD5(password) = 7ab11c5eadf88eec169f0307c04ab683, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 34 GUIDs as hex (shown below).

Decrypted: GUID list

  1 23a91ee2-594b-33f0-8e13-8387a8c92255
  2 c5392d11-ce06-76ab-bc83-a0fbdf860ba3
  3 27eb4814-89f6-3253-89d9-04726345a1db
  4 d5c40b98-6f22-1631-bd5f-4601b2d01b79
  5 5f31123f-3b08-26f6-bb16-957bac0eaa6a
  6 461c156b-d959-5875-81d9-d2011a4f89b7
  7 2fcc1d5b-5b91-8b52-9af0-3de8f2b958c7
  8 91136ee9-e7e2-4b7b-bf77-038fe41048aa
  9 c41cc23a-bd43-1b32-9191-35be9469edb8
 10 b383a933-b46c-13e5-a805-4a54ce711575
 11 203e6583-df92-7c01-ab45-57319216c6dc
 12 661dcdbe-d9fd-8fb0-9eea-b785a54e3192
 13 b986e4f5-46ce-4dd7-8241-97696b81dab5
 14 65725bce-8d7e-346b-855f-23f5a6fe349f
 15 c21fec94-d0f4-7348-8486-5f99edd5c6e4
 16 fc7ad103-a6e0-0c99-ada2-2b37a513a28f
 17 bde65502-fbc7-1dcb-9f4f-90c98deafb78
 18 5c668d3c-ca3a-432b-928f-f22930f13440
 19 ab7c3f6d-902d-2ecc-a379-515c9f49044a
 20 42940ced-8689-08b0-8323-6809bd4648a4
 21 e6c6bc42-ea7e-8252-bb07-dd4f2abd5f40
 22 0db790fd-3745-5877-8c0e-7eec0ebb92cb
 23 81db8188-4598-5dab-b9c8-83e98e9c8ca2
 24 d83f35e1-10e2-6ba5-8572-aa0a8c5abd78
 25 47cc8b50-6230-60aa-914d-009652c6125d
 26 09ec5550-e233-3ea7-ac1b-c8881f276fa4
 27 4febb4d8-15c5-40cf-b623-7794cac00fba
 28 1b6bb319-9c95-0007-ab82-c526544d8a18
 29 01108efc-419b-07a6-a541-8633430389c5
 30 ce1118f4-06e1-3d07-82bc-c871011ab80f
 31 52ffe10b-75aa-158d-addf-5990d6f6b1a8
 32 31022811-3b42-8a2c-84da-92c27f156796
 33 4676b4a4-7b19-670c-b035-94f37bebe0bd
 34 e20fb694-0d9d-840e-9b7a-88e4630ccb59

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3731258411784370142085566340031868. Exactly this sequence comes out of new Random(317).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 275 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 34; the post has N = 34 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results