A858DE45F56D9BC9 archive

201210060804 111en6

explained decrypted filler

3DES(name+title) ECB, 25 GUIDs, seed 264

Metadata

Post ID
111en6
Title
201210060804 → 2012-10-06 08:04 on A858's clock
Posted (UTC)
2012-10-06 12:04:05
Timezone
UTC−4 · title 08:04 against posted 12:04 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,616 hex characters · 808 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210060804) = 7468e509844c37f321c1aa937a9a0470 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
25
Filler GUID seed
new Random(264).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
300 · predicted N = 25 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
14 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

2FBE8368C385895A C40D3B6FE7498AD8 B55D9ED28134924E 0B46F095B2740B7E F71AF03FC221CE65 1C4EC5BA11C53540 53BE4D5E63549426 09D811EF4835A9DF E478E9E73909F79B F5B80E2BE044FB26 2FB1F59ACADB53C8 14FC2A7DBC1BC815 906A2E90FEC7CC94 061EED42F7F0771C 62AF671042EA68E6 BF92B1EBB44BEC44 7BC6DF5011C6DA4D 229B5C308AC85F04 686194055AF65E96 1137EAC221D57A16 F6F272247D7949EB 736DB71AA4CA9912 8F6EDBBE944A701B 1879A43484EA11AF DD86019CB5023462 81D2F5486C73D2EE 6B1374B4095941F8 3BAF07B752684495 6521095DE3011D10 0FCB61552E057A83 3935ED15D26A4A59 DED16F64B42167AD 361D85F20C5F6BE6 E9A0CC3B79F61FDF 3DC2E0689B838A19 7555A50496769D43 08AA1CFE79D7E42F 1A41276655D6155D 371D023E9EFCDC9B 467F54373B645CB0 74982DF5448D1258 B02C479537BBCC00 B93CE7A8AD12AFA0 084C2A8A015ED1FA D2EA3AF361262CC3 04830AFBF1D1218E 0CA6817604456211 A7D0B66C42CCD1A9 382B71C60377B95E 3D08A0ED2BEADC35 67E4485CD256CBDF 764CA6BEE0B40E2F E272B840F5D265F5 3DA8C6E3E8D2D529 BC043B375782E18E 83E50EC7335729B0 5C45A003A5B03D1D 258771124D856283 0DBFDB3C5C62B27B E469FE5C18F2244F FD0DF45CC270C693 9D31CECA6A47F95C E4CE36E671BFB2BC 5C56C099A7EF0C10 9F5CEDF4465C3696 A55C99617A3DAFDA 2C3AE088FC6E77F7 9B0443F30A27D5F9 E58F5D63788EF47A 0120308E8C8F46A9 D4CC031F58EEE034 A34837B882A50081 FA54B9A21D9BC82B 4D34A3371406258A 6B672D16D24591AB A5DAF9B4BF397612 D7B08B90184C0D37 6FEFD7A4DAB77980 D3F4002BFA53950E 530A6D89D93996EE 5502D749AD4D1BB4 8B8898A3E20814F8 3AEBE05C9D741F83 B8E897CEFB57B6EA 2956D3EA6BD3F5D6 6199D2DE52BFAB38 CE97CA231DE553CA 1EE1121FF3378934 29C3B497AB78F3EA 4E790045D5CE6D09 8C98D848CF336098 5E91B12BADD03B71 36961840D4EF3071 950BA0F7F689E677 E520D933BEA72DB5 29F545731198E117 55339DE4614A2904 3141F71D7C1E64B5 224ED4AF57173968 C23A97762EF2FDF5 2C59022841FF05C4
  • Read the ciphertext. Strip whitespace: 1,616 hex characters = 808 bytes = 101 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210060804 (name+title). Key = MD5(password) = 7468e509844c37f321c1aa937a9a0470, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 25 GUIDs as hex (shown below).

Decrypted: GUID list

  1 2ab5651b-64da-5c8b-8afc-048238c1cacd
  2 427ca952-5707-27df-8cd4-d140dbc9273c
  3 5ad2df34-bc48-2c22-8b51-0c7b655f6fe7
  4 4e380ef2-f477-83f9-b602-b7ffc281f2d5
  5 6ad77f68-10c6-32ec-b41f-7126fa3431bd
  6 fba8e0eb-9bb2-2b84-afc6-2e967b3ef2ed
  7 75d2d5a0-aba2-1690-8422-4a92eb0a9107
  8 dfba7aa4-0f81-779e-8321-10ed7532983c
  9 ec21884b-6b53-5e06-b2fb-63b9f22ffe86
 10 ca31149f-d636-50e7-8296-18e953b00115
 11 3d859955-0968-7ca6-b4e8-892478abfd19
 12 14a5776b-4c36-5d98-aba6-295a9319e2d3
 13 cd8afeb3-d3fe-1da4-9ad5-1fd1b7725518
 14 4c23c6be-ffcd-7d62-9201-6d334fa8f972
 15 25c1c8af-868d-63a1-bcad-10aff0ad0679
 16 8e88794c-d3f1-8ffa-bc63-fa4513b26cc1
 17 4eb0d795-b0c2-7a27-9cf0-032aee6673eb
 18 c006ecc4-7ff6-6f4c-8d74-2c48272aad5b
 19 fea4e3a6-9dc9-7dc6-bdb8-d3f5da312459
 20 c8e63b2f-0861-42db-be9a-85ed8a2fcbed
 21 21198dac-7393-870d-aa07-f9a45e3dca2b
 22 98cf4edc-a680-5c27-8528-963d01cc00ed
 23 a425e87b-e34f-597b-aef7-335ec013a236
 24 a0a92d51-c066-2590-aff4-d70cc15c54fb
 25 54148385-b3d3-5079-96c7-64c767689151

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5228321755751768767485525. Exactly this sequence comes out of new Random(264).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 300 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 25; the post has N = 25 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results