A858DE45F56D9BC9 archive

201210060604 111c5u

explained decrypted filler

3DES(name+title) ECB, 34 GUIDs, seed 0

Metadata

Post ID
111c5u
Title
201210060604 → 2012-10-06 06:04 on A858's clock
Posted (UTC)
2012-10-06 10:04:02
Timezone
UTC−4 · title 06:04 against posted 10:04 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,192 hex characters · 1,096 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210060604) = 184667f277242c341fac6ebad1718f04 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
34
Filler GUID seed
new Random(0).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
294 · predicted N = 34 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

ACECE7B31431AAE5 5671E107FFBDDF1D 7B48567DD278EBFD ED36C27125AD4984 D3A23656017BA1AD 9D2CAFB08A698777 B8AAA922B5B42D2A FFDD6A96C16ACCF6 0C306D149E37D21A AFD7A913C57F8FFC 8CC8E1ECB4615310 FCB7F16BD72CE64C 46681AD513786EEE 3D0C4830E2BDF785 29D822FB47EA855A A3D4222EF4AF6225 D36AE2922FAF3D03 06689581AD9B5DB6 731379441009CB9F 05DD8A4C7D04B9B3 A2DD0E25F5FD0B6D 743400D01CE7AE80 E862089DC5B07FFF E4B8AA7005E55D08 DEE8AB5161548B72 7200B73AA51C2D40 2ADB816563568BB9 DCDC0AFEA22EF2CD 0C20F2631D91FCF0 08716834E4374C91 CCBD66F36E27B22E DFD5AB6B69401C57 65CB4A680B3C7F26 25536C133E913B4D CE2556E15F1BCBDD 1E6D20B9F15F4CA2 23B4E5C25BAB7521 EEE482A4BD3779D5 F6F67B435CAB45C0 EBD53F7290E554D3 60917E9233A61326 15D116CB2D9CD55A BF858729C50FF919 9808272C829D49FE 1D370943EDAD509F 0D8251E969E6792B 373EB699406FF036 B5D19078DBCF0BB2 FC23797B07E650D3 9D725B5B59555FB7 25D552B9065E6EF7 8312BF5AA62E8B01 5EA7CCF6CDB1E9D4 1BA16777B35F9A10 938279CA56BBCD4A 3AC3A9B4DF838CD8 ED1E0F6297A31337 5EF56F315DEFDDCB 019B8AC075D30154 0A8C53E028B1CE6E FD8942767C991FFC FCECCE0BCEDAC002 78EF8AB07FAB45DE D18AEA27EBD2B70A AF8F8BCDDFDCE0CF 0612174DA640B6D1 BF7D6202DFD993BC 50CF97128CC12AAB 2FEAF7FC8D75ADA4 5E02985CB3A03220 D0420089A6491989 EFDB5BCF1E7608EF 23B4884017DA490A 13808A183F7A7183 E478087A583FC93E A4711AFA87F12C47 AAA70449836E5B18 81B4934BF0F75EC5 211E54D92433C4E7 0C5B2CC698CA884C BAE5486FB8F7C712 D720829FE9276519 60CDFFCE0667BB34 1DA29D691DEA4401 4A87A53683BFBEA5 D50C87E9AC4B5579 587644E1E28B227A 5E71983B5A049A4F 159A2232A7C64CBE D3F95FE20B77BC64 9561F70C21C4449F D9CF472A09A9C829 AF676BFD57AA4C99 3FFCAAF4F89F19BF 197788175356CA09 4DB338C5AC458AEF F7E1DC19878F5223 2940B56A871F9376 EB16D4F7AB45BB37 AAE6CEFC94264985 B4B246516BDD4CCD FE89EF096912AAB2 D51BD2D0E131AFDC 9E425B24383CB819 621521B36C6457DA 40861BEBAE56EA60 9CA00216990A69D4 0C0ECB1D31E64068 4C139232585E5BD8 68F168703B96A923 583004F8F5635202 2B5F791D6BCF80AB D7E724E44C329871 E1AB8188A8A9C62C 79B4D0799F42C829 9E111E3F1FE1D24D B9AE0E58BF4D4CBA AF8657FB7155E0F4 32C91FBDBF7BF00C B4C5A7601582C68A 6CF836A82FECFFDD AA67E66926C490DA 1DEEF37DE7832273 76FDFF4A40A21030 CDE168B8785E859A 8DFFA8BC6411E760 39CCF0DEF8CBA9EF 52D14C91D41FE39B 810DBE505D1DEE7F 5223F0F98FFD6357 CC80EA2988DBB548 926B84AD6E4B555C 29EE22EE5E2DCEA6 98B27CF39506505F CDC3E48089A17E1F 5A1732FA1E95AC22 DFCD7ED0DDB4D063
  • Read the ciphertext. Strip whitespace: 2,192 hex characters = 1,096 bytes = 137 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210060604 (name+title). Key = MD5(password) = 184667f277242c341fac6ebad1718f04, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 34 GUIDs as hex (shown below).

Decrypted: GUID list

  1 cc10cdfd-6092-6a02-ac2c-8690d45ef179
  2 02dd1b0f-d7b0-7f72-9035-d0228a0821a2
  3 0f328a05-c61d-6ece-961e-242e65823384
  4 61ee386d-8d4d-5e26-8f91-4e4843ebd424
  5 0f5145b0-267a-14d9-8831-43a222597409
  6 946f31c3-ae46-5cfb-8990-d13dbe7e0c58
  7 0bdeed50-986c-8c0c-ad5f-1795c31bbd0f
  8 14fe84ad-d605-348d-9edf-407fa07335fa
  9 793f98dd-aa10-885d-95f9-873377eae5c3
 10 b56b88c8-0ce3-2345-a0e5-37504981ad75
 11 e30bd911-e40e-29d8-a8f8-ab7514a23760
 12 18e33029-5a1c-4840-8c72-acc1bea30d4e
 13 8714d550-8232-54df-a718-7bb0b6f9f798
 14 79d12f36-074d-4802-952c-baa93877bd1f
 15 53ab3aa9-1030-8cec-9b17-422e15cc5511
 16 0dca9cef-afc7-0bab-9564-ab22eaa96fa9
 17 91e528a8-5e81-7ca2-91fb-42432d006fbd
 18 3e48a9ab-787d-847c-b2ba-84d618596250
 19 05406ded-de80-6591-9b4a-f83260c7eb1b
 20 f6c63afb-ec77-2a64-9e89-af587c4697b5
 21 3720b189-1e42-7849-be4d-9c29161720b6
 22 82beb0c4-e018-78d8-a19c-9c9660575cea
 23 8aca4017-dd64-8555-8882-ab4824c70e80
 24 222fd8bb-e5ad-0d19-b1b9-129636f1b266
 25 a4d90a03-a3f5-64a1-a9db-475155f7aca2
 26 1d171cee-ec99-4fac-bbc7-fdd78f520400
 27 4b23a61b-3774-8619-974e-6375f4919b77
 28 e913f4c9-77cd-6892-88e5-75b7917857b4
 29 eb7abc94-f1c9-4e14-868d-64e05cb0c90b
 30 41417c78-b331-091c-99d2-f31f94f896c0
 31 54153518-8fa0-128d-a078-fd2b3be9ab4c
 32 c4eb62c2-541a-4593-bd44-fecc70a67244
 33 f41191b6-39fc-2252-b754-4fd2c08c0b6b
 34 10ee2d7d-f927-8c2d-98b3-d4e7725d8238

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6765158382245480786277806486401428. Exactly this sequence comes out of new Random(0).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 294 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 34; the post has N = 34 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results