A858DE45F56D9BC9 archive

201210070344 112wp6

explained decrypted filler

3DES(name+title) ECB, 31 GUIDs, seed 209

Metadata

Post ID
112wp6
Title
201210070344 → 2012-10-07 03:44 on A858's clock
Posted (UTC)
2012-10-07 07:44:53
Timezone
UTC−4 · title 03:44 against posted 07:44 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,000 hex characters · 1,000 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210070344) = 46062ea1a19c1ac9910526f046bd8a5c (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
31
Filler GUID seed
new Random(209).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
359 · predicted N = 31 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 1
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

ED42EFBF2EAF1E9D DC41DEDF6E8D3F04 56C9E3634A59B706 DB1391F111C6A780 AAEACB929E601366 A498A4B287C7BCBC 918CB0B147E40BD9 2D44A5630D725094 FA80696563959431 2C17144567F388F2 1F8505A8C104ABB3 BBF03E45F35C4B7D AE94E47E474F88AD 330E84F4174D89A3 2E1C6C176FCB93C4 9B9498C14896DFAB 778AA08F162C98CE A263448BA53E6CAD A250FE3A9956EFE0 5C46F8EB4AAF4975 24E14275569B3EE8 F1292D1263070797 366C1B4C264735EF 02FF1228D7F69B9C 9713C9C9255691BB 305F48C2861BF4C0 6C7E9337AA2416AA 5D50E2776C3A3117 9A2BCC642E9F8A78 E3EDB895BA3E2507 D1AE5B418216AE13 90A574BD1144C39C 1A91851C433D738B 1126CB1B4D62C20D 7CB7DD05DD0C35E7 908F3AB0FC766E96 FC09FA93ADA094A8 3D0DE5C5B7F81103 A871D117974573B4 A21F8B0161209F25 5025D31281D449F4 7C621C09CE3A2F04 F2F142A61186A15E 26DC336AEE297B2E 3D7AD305A3D3B83B A66E7F01EF476CA0 AE4B40B2974BEBA3 418662374A0E3923 8A24AC6DEAC945A9 396288BE1D3872D2 FCE75C79AA86A299 1FE83ED32565960B 0D42435AEF69A61B 8BF5EFDF9BDCAEA2 E656863FBEEB610E 9A5F47E0E3C77C40 EEB8C98AB8AE02E6 3FB0B076CA3FDC5E F276F6FBBD455C02 033B16587ACF6555 D94443714E017CAF A6D92A97DA8F1CDA A57D520ECA2D40E3 7A1B29A2915498B1 274D5F6546A409C7 22224CF2025F660B 9D6E91F63F916453 89DDD578F10D8632 7F482B31B78A750C 26FD6FDC2A700FF4 F9E4A53E8EF89DF1 3E6EE322E4AB47F2 57FD4DA047E32D83 4F9DAC878F35D23B 0AC178E7C57B6E7C E027F3A1D1A51CCA 3BA1E4ABB61C9BA6 B1AD12E3395112F3 4706D94FB081D20B 9943949E93C3FBC8 F36B54E2AD6F1044 624FE51E4C1EA875 0D4CB6AE6C99E1F0 582DCA90C4427B08 B608DEB2AFC6C93C E61A661FB929EECE 380B7FD7F340C713 37C24D7FFB85E867 147E5546DE43E520 73DADA8E738C6FF3 3C43A87433997126 0C6AC4D0590DDBD7 7F23E0C98D64970C 0F4BFD0B4B0E7CE1 0BDE13B95F189007 AC209B727E9360AE 452FD3F35FBB8B67 6E08F1E90C54AD76 71743715FB7894D8 76CA1DECADEE11A3 34F1779F0A969F4F 32C2473ADB10CDA0 CA9C4F203028BCFB 083409EB080D31AB 72EE3F9DFD26B643 16673EF1F76CC160 D61A86166E347441 6546EFC91B5A8B48 F286D1FAC3C8F797 1C60665EAFA4CDB5 703727B7AAE05F2B 461D92FCCB45734C ECF717B01C9BA880 E7B4FDDADF8935E3 1B360845DD5F9C93 77770F3EC8E8FBEA ED71518DD673A143 335140F2C8D176B0 9B1122AD4AF28DC9 ADDF4661D96132AC 956F1BD5E05BFC6B F341B51BFAFE0959 56DF7DE194B0754C 68132E9E47651954 BB2180F011CD0F15
  • Read the ciphertext. Strip whitespace: 2,000 hex characters = 1,000 bytes = 125 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210070344 (name+title). Key = MD5(password) = 46062ea1a19c1ac9910526f046bd8a5c, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 31 GUIDs as hex (shown below).

Decrypted: GUID list

  1 1c55c36d-453e-8a99-acab-0b37a196d102
  2 616d19a3-af52-1238-83f7-e220728db8e9
  3 3ba25cdb-7d7a-7b1a-a090-d99b40310403
  4 78c23622-42ad-1cf9-a900-4c471929409d
  5 e32eb594-a304-5e33-b526-81a9577d0732
  6 f8530b35-aeb6-18b3-b35c-02d68ed1c34f
  7 a530d65f-ab23-48f8-a00f-81e4511b5c98
  8 79196b6b-1952-2018-815f-0e6edb5d8415
  9 44340409-8b8a-7e34-96f8-0c16f95a6ce5
 10 d5a9fad6-d094-3635-9e37-b298abd4fc41
 11 bbbdf309-0e1f-25ec-bb07-3c3669777420
 12 ded3f31e-c7b6-5605-bf0a-2760b3cd4a5c
 13 0dc9b432-0a15-20e7-968c-29054e94b8c0
 14 e11caf0d-e819-116b-90b7-a19ba2d4e7d0
 15 32e7b294-4088-2aad-8249-060925267211
 16 9bf8202c-9eab-4763-973e-2dad4121757a
 17 67569422-d623-6d40-8412-48fd147010dd
 18 48ee976e-b2a9-5b3d-a433-0da91c2167e7
 19 a0ac33b6-f761-31e5-9c45-9a0c80dffa9f
 20 882d2f94-8279-20b7-bafc-6d292fe03c3b
 21 80415371-52f7-5abe-8120-c8843428bc36
 22 98819a1a-af8c-1540-b06f-5b8bb3786e0a
 23 3d1afee4-b775-2e5b-9e4f-8b8e64f7dbae
 24 bfbd9671-539e-0ccf-9668-993d1f0f6ebd
 25 d03751b6-5ff2-1a1d-b068-f4d50d588ff8
 26 72f4814d-21de-819a-bf29-306d35eeb26b
 27 398f5f6c-6186-5879-b7d5-170ee45e8ac0
 28 3137e68e-e2a9-1de0-83dc-40cebdf95584
 29 78faed9e-7cf5-2c49-af86-bacef60c0480
 30 d98e9ba4-e1d1-3f64-8215-3a7b353adb5a
 31 6f5b57f1-97a8-3fad-a06f-8bb644910be1

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8171514273252124653251201851233. Exactly this sequence comes out of new Random(209).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 359 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 31; the post has N = 31 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results