A858DE45F56D9BC9 archive

201210060243 1117ot

explained decrypted filler

3DES(name+title) ECB, 34 GUIDs, seed 213

Metadata

Post ID
1117ot
Title
201210060243 → 2012-10-06 02:43 on A858's clock
Posted (UTC)
2012-10-06 06:43:55
Timezone
UTC−4 · title 02:43 against posted 06:43 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,192 hex characters · 1,096 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210060243) = beabb834bdad0ee0372ab5a4b1017af4 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
34
Filler GUID seed
new Random(213).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
284 · predicted N = 34 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

55977EF1E12EDFFD 4D974F5BCEA725E1 E4026622E712A0F6 04C26DAA84D39AEC B93C93868FCCE0F7 0DDC671A3D1FDBEB 52B3BCECA91406FB 67285ABEC3A97AD8 B38C3EC49FAF8FFF EF34BAA476D33C5A 2CADF6CED8CDE0F0 B4A3A51150CCE867 7E2F3201C070B9C3 464918BB351D25EF 7045FEFC21D4E654 CA1EAD12DFFDF212 3932C2DD6D17CE10 0C56E5B5581EBA51 E8EBF95276767681 5FD82526CB85DAA5 2FCBEF9F247239F3 336DFC625CBD90E0 48A9A4E9E89F0244 F818BCFE44F0363F 051E6967F1704673 AEF812F304EDEB68 6129470DC3ED05D5 C37E92E39ECFC8F9 D0738944657ACA0A 5125AB11BA7E5902 2B379332BCA78DEB 6AA91E89ED191D29 95A1AAC50A3A5251 1E46AED35AD05299 D4318B0AD0C62C5E 64AAEC0F58B0241A D7F05022342AC44C 1B1DAFC7AD1DD5FE 62DE6AC2F58B2E11 BADADAC4BF9251A0 36EFDE63EFEF5F11 FB2DA7B0B627F3B5 2FED764C1C08EFA3 E1FBE2B0EEEFD0BC 20DF6D60094F5967 353FEBE151A3A06D 7362DA782D343569 92CDD35DB982D240 580982868A3338E9 C2B6282A991BACB2 94A7BD6B243C6A1F C2C74DC19DAED1A1 ECDDE7F84F34154E 9A23582C6708F6BE 4DF33122F5DA985B D56A69FD9163BCC9 067CA2A90FBBB098 00C7D485582FECBF 9A43DDDDA53A3571 7C8AC02D5D87F22C 514232866B112B1A 34894A1905A1AF1B 6F7AFFED1C78B48F 7F485374752EDED3 73C56B99C3320BF8 F0A80BEE9F3C61C9 A8C24536A8480ED0 2DF8ABD43651EBDA B6471987679684D2 1A31C3F1E86FE4B3 A020E5224DE3D668 499AE7BEA8E5AD08 BC69E7D8EEC4DA17 BDF3A50C252DA692 679A15141926E2CC 9AA17AAEF72197D0 D32BFB0873E439FF 553CDCDFC475BE9A D5B285696E65B475 7F339C1662212FEC CF3A30B411378C01 9AAD9D56867504D4 0E2B8C8613FE3664 C73A61084DD54D69 0886BAEBEC5FC215 DDD4A8B1C84B0219 AD6BCCB12FB2997F D8438FE68F0ADB94 ACFFBA02859B1A88 C3A9D44B939D514F 54F30FF08E38B26C 571B3968D7ED81E8 5A9487C0BBDFA028 15B4845275428F51 5341EDA6D5662884 135F8F41E6BF7108 1EB89FE286B074B6 A31E4CD9EF456A7F 35634031C2834051 6D899A3103BFE427 91180126AFCFE573 F881067AF04E6598 B8AAEED464ED8952 9453A2FFCFE17B69 49B0D37F6DA69450 218F27E572BD5C72 B1A6589EF435C1BB 659E6B86B0BFFAF1 D514A9AAAA62ECDA AF54807E29AD7DE3 52F2B81F255CED7F 5CED041F528FCD6C 3B1DA6C31E0E4048 6FF0B6DB3E1E11AA DF8B01EA84F07315 08A9C41E1D8634D3 F5F7D889A1ACB3EA 53E3DC276ED40890 D33F4A855133A8E7 CE79213104598119 9AD10E42532AC5B3 D0B3A85F61598EF4 1E09D09C895C60CB 763D6EDE9CA3166D DA4FEB7A7A320C1C 1C2E2380A752A4D8 663DDC5FCEF49318 CEDB829B8F0E02C5 87C7D0899F8475BE 168D219788A28772 4B22CE71816BC856 128B0820F98E9CDD 25976D0CB9885197 1B2C379FAA844DDA DB634C3CA5607FDE 7910D996D831DF83 C541F8241C8E0A72
  • Read the ciphertext. Strip whitespace: 2,192 hex characters = 1,096 bytes = 137 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210060243 (name+title). Key = MD5(password) = beabb834bdad0ee0372ab5a4b1017af4, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 34 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3cee1a7c-4857-0156-a356-b4ef12e3245b
  2 a9346d15-9578-2639-bb57-f89d3b05b9e7
  3 019f6e6b-848e-5c60-9b08-eef94b8dab42
  4 c300ee2f-7ad0-0eba-9c37-b327718b21df
  5 b3ced9e0-09fc-3dba-b631-e9e91603e159
  6 d002fda4-b832-6a67-a1e6-252ba581196c
  7 94c5b99e-3e77-3581-aa4b-d96f72fc002b
  8 9ae42d4e-c374-2839-b7cc-889760b9439c
  9 23da4914-7da2-2e52-91f2-fe273af7966f
 10 56071cce-ae75-7c2d-96b3-dea068b698b8
 11 ab552bf0-8263-169c-8519-a548463bc2eb
 12 95226112-0b81-6632-9bd0-f4eba3b3bad0
 13 e26e76a8-7ba0-024f-a296-0fac8f89ee21
 14 9855eef2-3658-29ab-b287-88a30513c542
 15 ceeb2bf8-d4ca-0b1f-91d9-172572d6bb57
 16 b91eafbc-0ced-0a6a-8f3c-122975ba6231
 17 81f9df86-bcf6-3c85-9288-1ebeb6dc4fd4
 18 28b2fb12-780e-00ca-9674-cb475dd3c125
 19 db5928b5-8f6d-3318-855a-4a2e284c319f
 20 47dfc3d9-c88f-7e99-835d-51cf7bba5f24
 21 49f938b0-a0b7-1e14-94f0-f9fe6606401c
 22 34e71558-772e-0805-9e3b-784cce74b3db
 23 7e085565-28ad-8616-a48e-23f3f60fa1bb
 24 c15f2806-2e75-32c2-9a6c-1749297999d3
 25 86b756d3-20a7-5a5d-aeee-646320b76762
 26 f40f6790-aed2-421b-82e2-2639d647b57d
 27 0785b4a1-651e-0813-a958-6a4ef41a6fe0
 28 523c00aa-afe0-5277-958a-18ecffc1178c
 29 9f0e6b3e-9caf-31a3-8cc1-8e6d1a62952b
 30 8e3f252a-b0de-56fc-b320-0e13f58cb956
 31 25ab676a-648c-7fa0-9f78-c6f0f7131cb8
 32 5c9cc302-9efa-5f2b-ae91-15f17f3916a9
 33 e71ebdcf-699c-821b-8baa-86ae1c367c83
 34 dd1a1075-367a-2fa2-9575-e72d64e87e7a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 0250363227160200303710835405357582. Exactly this sequence comes out of new Random(213).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 284 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 34; the post has N = 34 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results