A858DE45F56D9BC9 archive

201210060443 111aig

explained decrypted filler

3DES(name+title) ECB, 35 GUIDs, seed 283

Metadata

Post ID
111aig
Title
201210060443 → 2012-10-06 04:43 on A858's clock
Posted (UTC)
2012-10-06 08:43:58
Timezone
UTC−4 · title 04:43 against posted 08:43 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,256 hex characters · 1,128 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210060443) = 9122c4463590f625979b004948a307f5 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
35
Filler GUID seed
new Random(283).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
290 · predicted N = 35 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

3028C382A6CA2B00 5805BD03F46C3F96 24A2F87D5EC96204 A5D0DCF6E9346056 286298812C491C15 2403BD41FB5BB500 26C4D8AE32B7BE0D DDC37ABF150FC548 8BDF36B9307680EF F68D12C4B285B5A4 8D1C977CA2830A2C 39D71E17DFBFC107 150577D436C7ED8D 5FB800DA22CE964E DB92B877E4461B54 770CB7FD66FB7D08 8CD026C8FFFB6DDE 76BC315BE93B3DD0 4CCBE67825314815 52ECB1048BCF06C9 3FE2913F6D83E532 CF041AE1E73CDA55 835FE67685E4A3AC 3BE80D63A640BAD9 0827EF5E8BA85E0F 8629C06D188377B6 E4972D7D9EF08EFA EC024CD12BF7E041 1087FB9E42031436 3EAD25AB631AD7CD 6CF5AD96288536E5 FF33AC1953940FB5 93D2F67E67D61342 0E46EE6FD3CE409D 5A35EBAE341EE0DA 10AEEBCDB4DF90C7 3B9E1EFE6A23A49E 5A47DD59CDFB10C8 AED46A68475B636E 052EB0C2E9123BDD 600E5D56CBAA340F 66DE41CC329F7D11 EED136A0A9FE6137 2D8269A23C55E92B 5C958E373DB51CE3 51D8697FCB330DBE 8C6320C54DC14742 3E245B4D789BD72F EF4E17AF105972E3 BB9E582B60691C50 54B52C57F71B4A27 89BB7BD12651CAE0 25E531280FC70559 D3E2FEA9F96ED142 33101EDEC6F1ECB8 2B7B7D064BBA131C 7467CB413A20042A 4A080EA3A820E0F7 7AD2D77661824B37 632465678AD295C1 BCCC80D7AC166276 BC0087C23CFC77D1 66FF0C4309391F6F A9B9EF9595E9F91A 13498188B1A38D2A 832F8F53E3468E2E 4FF14FF85027828F 7BD5CCA83C3CA67E 7139BCC7F721F53F F4D03AA9DB8A5235 0E4E436FB0F91ECE 82F2B6B03F2D3116 DE70AF9675D39EB9 776B549A5D1768F6 973DCB9E79A0A67D 5854474B21055F34 1D609DD45BA00A51 6E2903AE4D6D832A F2125065ACE1D7DF FF83995783FE7240 2D766427CADED98B E8614DD9A904C7A6 6EF6EE659F107645 B66F533C6BD309D3 94D5959F30D12D1E 26BC5006F7BC3F5C 3D0448FEBA23FA44 95A451A8AF8885ED 9AB5FABC1D44CF16 F901228F3894901D DAD61B4770D474EB C50968905C312FEF B7A1E6A6EFF0457D E8B11D4A54F29019 57F45C04E92B624D C1ABFAB502ADEEE2 0F55CA79B079AEF2 1D9B6CC554185E64 23D343612A7E9BF4 A02842F445A963C6 13A1DF14A3E11AFC C34E62A335970DE9 2825EA155434F7FB A3D02B35BB233745 8903491E06777E60 B5F32247CDFA785B B1747CE5190FB8A4 92BCF0BFFFA0A237 A8374417E64C0044 18660100EFAE1BB9 4667A07A22DEAC2B 84A5D77804D30866 3806BF4EE9896A93 169E6ED5EBC5161F 8F34AEDDF24C33F3 6129B65D677B83A0 E806A594EBA3B145 AB368C84E224C9C2 747420F253AEA2EE BB5EF9AD268BDD5D 0C7DEE5FE70205A4 B1A1B74ACEC80762 F54590AD4139BAB1 3428F0367CFEF7E4 B068B4387F18F850 F38EAAFFFA3B1336 4871E1AFA878ABA2 510AE998956E43F2 9F7C8583B403AF29 2840F9CF870CB485 7FA58A81EA6EF9A7 61D3F68AB3D6E52F 02F6BD5E04C83FEE 9EEE7CCB3524D8AE F3C0B8342F49D317 F093EF0D63D9591A 63967EAC45FC2430 DA7C4A1CDA438733 7DAD3759416C9C2C DD55F44123CABF20 1931C4FC14B25FB8
  • Read the ciphertext. Strip whitespace: 2,256 hex characters = 1,128 bytes = 141 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210060443 (name+title). Key = MD5(password) = 9122c4463590f625979b004948a307f5, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 35 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e3e9abc3-4406-51c5-8a78-e80445812214
  2 08296479-eed4-7db6-82cd-0443fc2e659c
  3 57aa6e75-fe91-5564-adfb-80ace6bcb98a
  4 dba313ae-99b8-83dc-8baa-e3c31f5e707a
  5 e8691396-7fa8-81a9-bbd4-f5fd40d6b51d
  6 25421261-c69f-7568-9b50-393919650fd2
  7 b6f992f1-e6b6-6799-bad5-b753f1b57b1d
  8 3e0414d5-e57b-3ddc-93a4-2b2078966a9a
  9 0e399786-b9e3-87fe-82bf-b32a46c80807
 10 7f57f4bb-b6aa-566d-abb4-8885d1ae1ebe
 11 a4f90608-b138-7c5a-a8b5-cfb67be75e28
 12 b7efc0c4-6fee-32ff-bf2c-114820946b50
 13 9fc723fb-f6df-11ed-bb32-bed0d3eb70eb
 14 75f50769-b90e-6c44-aa51-4c99b15ef906
 15 4fdf9d85-62e7-0ac9-a0d5-68f86012af9f
 16 3e5eb14c-8b42-6483-aaec-2d31b1c6a3fd
 17 cdd4bbd6-e979-7701-b71e-f0ac3e7eaef8
 18 50863187-c74f-40a4-b10f-1f620a72d99b
 19 048aaafe-f9b2-3515-9f38-c3042996a598
 20 17826bc1-97be-8d07-9f95-aa6ef95b231d
 21 4457cfc7-a59d-3c03-a95a-cef49a024b8d
 22 aaaf4260-a73e-2c9a-bbea-75a5d48fd3aa
 23 1a649e9d-930f-70eb-9d66-1a71909ac6a4
 24 9a66af79-f2d6-8433-99a8-18912c0bfef9
 25 07ee214e-e6a4-3d3a-8a69-0d351e93dacc
 26 5089287f-b84e-4abe-a5e8-30475f36da84
 27 15035df5-cf37-24a1-8ed5-1b7a8a0913fe
 28 0e3e71a0-b790-09ff-b17f-8ae87ee7c300
 29 008db360-b486-6dec-8da6-5e1473dde29d
 30 bdc58199-6caa-829e-8d19-18f52c81b577
 31 4e098b88-2dd6-5a40-853f-450495417fab
 32 780c63c5-e98c-801a-9615-ea37a073885b
 33 d5da0407-54fd-0799-b264-9b4e6be94b3c
 34 2527d242-7a8c-0eea-b2be-b4a59fdcb350
 35 7eef4f0a-6f8a-49d1-b125-f522fb0d58c4

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 57588763857316067438327834206858004. Exactly this sequence comes out of new Random(283).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 290 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 35; the post has N = 35 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results