A858DE45F56D9BC9 archive

201210070204 112tut

explained decrypted filler

3DES(name+title) ECB, 43 GUIDs, seed 189

Metadata

Post ID
112tut
Title
201210070204 → 2012-10-07 02:04 on A858's clock
Posted (UTC)
2012-10-07 06:04:49
Timezone
UTC−4 · title 02:04 against posted 06:04 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,768 hex characters · 1,384 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210070204) = d80d15778f7ee1ed752219037e9ae20f (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
43
Filler GUID seed
new Random(189).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
354 · predicted N = 43 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

32DD1A8CB9729B93 608CA88E6EEF1EDC 120F71C9C6B80628 7DADC129892AA992 711447A4873B0D5B 2BC1424839522ADA EE76FD14A77B0D46 8ED906EF99FE9F86 0EF3242A7D537FA7 DE69DE7DAE508F9D F4CBA5AF5B26B4B1 4E36C72F82ECE2B3 5E70179157460B1C F7AD21C92E593C14 4FBC7B26881774AA 9500B607EFA4D415 04144BB9014127A6 775E0DE2201C8AFE 9D870D8FEEEE5EA9 59D4F531808ADBFD AE2AF1373D6BFA57 0BC2158C9C48A5BD 7C6A76C23E1765B4 365EA157398B0E30 27F26C9CC18A3E06 84943D69AF577141 6D6FD8CD079A5CB8 8913405DF80A18CF 4588E12F7D21266C D85AB01B8733E6CD 5D599F40C18A9B81 B21C743CDAA30B81 058F8B5BE5F1BF77 599AA3CF3FDDCF13 BB076F1A2E47C80F C330C0D6B742A749 C311190E62C72B0A BAB74269E56089E2 AD924779B4A2C38C 04F92D2F54103994 26A0E411061F3532 C4C12D25392F3B1B 433701E02CD0F562 B7648331C0AF5E43 1505F19CB0DB2BF3 448F5038DE76B46C CA454C5F6B927F18 54A3E532DF4DA878 561265CD2299918D 8CE8308D56AE3C9E 301BA34718AC7958 BF968A5D5EDEC42E 8F0F1473A000087E 1F3F6098A044369A 3170D00B68F72A95 1D5C473771EBAD29 773213D69DE1DB21 6C3E8F62FC2553EF 040BBCF5004C3EA5 87CE5324E7464C79 DB282AAC6ED07D56 6E066C0352ED9E60 AE978E6DFF80E16C 9C2865FFF24CE9C5 77C36EDF0BFB4197 2ABCB25916EBEB6B E856C54471DF1419 E57D105DA635B4AC A5BF84EC7C4B7A60 55C4B1B00226EF75 53F3A4B5D92CB4FB F8F969F3F775F9D9 DEF734A30F3629E1 0D1276EE33831887 C97663D1206ED09C 535F5B05C1E2EE62 DF5D7F0BC542989E 322BE07A11359EEA 7C7EFCE00DDDFE90 26454A832EE58A3C 6FBC892823B713E4 0E5F199CB1F526EF EAE0E136B3E2D627 5DDF6F17785A6260 687FC484296E40E8 E418315A1D734B27 6716716F104A4117 847B052453F6BCE1 D92FE1BC790F3A13 937E69D85AA96B25 5ACB14B9EA3A666A 955271AC10560E00 BA0FBE5D3DE9EC51 C8BCF3F158B35D90 1C51B8A487C26956 F27CD9ABCE634DFC 49CC7C6B8701634B 4060E1D1CABA517C A2BF2E2F4FA31135 87C3EEA443B93629 D90BC37113CF4E1D 051A1037FBF8C551 BECE622852FCB12F C484E4580735401F EB32A467C2008684 54F8A6A05438F0FD B75CC8301D89F02B 1FB72D778E336AA1 7F1CC5766BD9621C 755DD6800909FED9 A92635C47DF35E7A BEF1D1AF91B5DC72 FFDFF2139DE01E00 39EF43D8E506EF78 2E860700FB936185 2989381B1D9B962D 6C327279ACF4827E C72FDFC5282E18EA C218E6DAAB326698 11267786C401D6BF 212E4DD2215E3E76 B2CF20B3C405D5C0 084067C4D30C842A EA16DF67C34163DC B70D3F0BB9F6C214 5EB01D91F2302E12 BBE95D0458B73825 89C37810541AA80F E421AB8135AFA379 DD8DC70BD7B2F99F ECB08B238441ECA2 54BFDFD33C76F10F 74D8F17821E4C6D1 55E746AA65128229 6D7B67FC9CFE1C8C 3494A6D7E57831A3 0F4F60C0C31DB9E6 402B6D66992F29B0 821AA4A3FC7802CA EDCB01900936E85E 7A97AAAC7DEA6B37 ECFE8209192AFBEE FD023F32DB66C9E1 F8E650A94643FFFE 015546E14B3626A8 7A03F60A29641A19 37E7911F99419830 2F1CD65D9BFBBA04 34AF1014B96047C4 30B394AD1B6A880F 1952625C0E6BBFDA E89337A57F7C40E2 6C3F9692192B879E FFCC08D2A1A706B5 F5FD0BEA794A38D6 0DE7C5B00523D786 79FB87D179A6D3B0 1F5D4B51395B9E6C F31278DEEF1721F3 07FA62DAAB5AA6DD 368B6C8531814F49 BAB019B16468E2E2 C3FC1C65116BC22C 43B60A417457FD27 0358509B7E7DF0C3 BD7EC853EDAE7440 B720BAF04A73362B 1236690BA83ECD6A EC6E50E1B8EEF204 467F71F7383F55F6 D45A5A19F327CCF1 4C2C077F476D3FE2 BD732691D4DAC1DF 
  • Read the ciphertext. Strip whitespace: 2,768 hex characters = 1,384 bytes = 173 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210070204 (name+title). Key = MD5(password) = d80d15778f7ee1ed752219037e9ae20f, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 43 GUIDs as hex (shown below).

Decrypted: GUID list

  1 64370096-907f-40c5-8f66-5a365996d673
  2 5d4a09d6-19fa-27a6-a04f-45f07d7b4f60
  3 1a6c3861-e72f-72ef-89c8-74e3d6a4374e
  4 98ea8cf1-4a2b-80f5-bf36-015d6fd137d0
  5 a57503ae-5ac8-49bd-b8e4-d56543ca1dee
  6 f5d517f3-03a9-671f-8bab-b75a703ba6f3
  7 181374f1-e50d-57a6-9b11-64f0e61f2e79
  8 c3f2aa7c-6dc8-226c-888e-17128f8ffc6f
  9 91bd3c81-6ead-3382-aa0b-c98b3d57f5c3
 10 a64c52f3-4adc-8f45-95ef-23bab8a4a760
 11 258da8d6-4d4a-46ad-af35-f4dd80a83ccc
 12 186c5a3c-f662-0fd7-aff7-a12680c0e5b9
 13 f6a7c711-b505-560c-8cd3-119662bbb858
 14 575182af-68d4-7a5d-8fde-1e2c4ab24c64
 15 5812d5c4-36cf-2cbe-a6e9-141eaa2c8906
 16 dafd767c-75cf-029f-b584-7a1fa869cbe3
 17 311a0976-c856-2d87-98ee-c0598a8db72d
 18 22de42bc-fee6-133e-929e-4115007ca019
 19 e9f95e09-1201-7147-b4b9-0473a6c1e280
 20 9b315832-23cb-497f-be1a-f2e717705074
 21 df8a7014-f458-855b-b53b-0b5b33275d58
 22 c3b05500-97f3-10ba-9192-701034f99f8b
 23 d92abd1a-5d8a-8b0b-bf46-39c15baa12aa
 24 63b5fe1f-7296-05a1-9c1c-f2fd231695bf
 25 1c5a988e-2ae5-2251-98f7-c59c51d3731b
 26 08fb00f8-4ec1-0124-bc7f-5723cb816bd5
 27 2c8635b6-bb32-3b4a-85cc-45d5a4e0c3f6
 28 b58dd905-fc9b-74fa-8865-291b5f5d1699
 29 1328b8f6-8c9f-696c-aa91-a6c8e78e245f
 30 3b023a99-c76d-28ed-8cf5-989ca8be2052
 31 879ba259-e832-8dd8-8ae3-67e8e1d4e8e8
 32 6bc8128a-551e-2777-8de3-518395c3025d
 33 afd495c2-d256-23df-8d2f-2a18243ae6c2
 34 ac9aeff6-744d-6cc0-bd6b-c6a73d943504
 35 0ce65aa4-9a1b-5b67-ae11-136651196dac
 36 20cf2a88-911f-8f9c-b445-cb3328d60a58
 37 03435d46-e6a5-511b-ab2d-970c33339ec3
 38 a8ab1bc5-5dec-13b2-9f1c-4588c181e22f
 39 d345cc84-f12d-64b0-bb7b-e9c1df56e6e3
 40 a5a84b30-d3a0-2c88-a562-01157dece979
 41 5e0c0a27-36c1-509f-ac0e-81152c8ad2bc
 42 2d62f027-c275-2580-8818-2c737d506b60
 43 5a1eefb8-91b9-2397-a987-f32cf5485592

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4278465238405720217481802037628226585162522. Exactly this sequence comes out of new Random(189).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 354 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 43; the post has N = 43 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.