A858DE45F56D9BC9 archive

201210071305 113dh1

explained decrypted filler

3DES(name+title) ECB, 35 GUIDs, seed 115

Metadata

Post ID
113dh1
Title
201210071305 → 2012-10-07 13:05 on A858's clock
Posted (UTC)
2012-10-07 17:05:12
Timezone
UTC−4 · title 13:05 against posted 17:05 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,256 hex characters · 1,128 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210071305) = 8f2db92ea8dbff80da833613761a5024 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
35
Filler GUID seed
new Random(115).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
387 · predicted N = 35 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

AA7833A7334CCC3F 44CC82184F79F319 130258CC64444FA8 3A007AC298675894 684FD1AAE07257DD DC31EC967E910412 6D985906AE27A05D BEE2ACA4A0DEACF5 4D30026AE698C4DA E38FE1A8A185BE08 8FE38CC33D7E7DC4 560B821D8CA3EBA7 5309D7BBFB452E61 5B9C5717FD883302 18BE32ADFF75ADA6 CFCEA3194B51CEBD 5FC7BA25DB39D0A4 8FB703ED5E763B3E E0E99D1B0379491D 620D16CD35D6B127 8C8EB3E1DEF014CE A306D14E53F21521 1CAED3C215B1261F A17880A9BF8632F2 F44BC746EEFFE9B7 D243BF8EA622D7D2 7DD54F9840ECAAE7 A041351AA7F7E2DD 82CDC1175DFFD45D ACDC549E9A6E4FEE 41EEE1445CECA1F9 B02EAF63F031F864 95B2DB87E8C17170 CF7C66A72C623D4E F11ABA5994B766E0 5CE6646C27A675D7 0DE763714F854C54 BFBCA5D1095EAC2E B4DE1F9D90B692C2 2E0BBE97693C875A 3C56C44236C8E87E 890365664475A544 0B8ACBBE02631EA5 42A663C093D39117 F2244917F7910EA4 942D5D83382D63AB 2B63C69931917AD8 B0B5FD58808D5240 71F2CAEEB7894277 654D2791070B9FCB C80B8CE6AC92CB82 D2B33A762672E38D C8DF67B64B5BD4DF FF494E61356A32EE E30C2806AE3321EE 3C1A99721D3095DD 83240D705E6E5312 EB3024BC6AABA636 BE38107BCE9CF83A 50B83B6A7AD337BF 05311D02ED5DCDB3 6CBCE3BF1BA094E6 8A2557AF35F36389 C106B10FC5F092EA 73C27C405CA3BA52 A40F48F0C06944DB AA2D45C492C129F6 3A5C2EE4E4B3FA88 7DFF7D220B679C16 F6B3289DE6C867B7 00B9D0EFE1F8C3A1 5C6544FE5E3F77AC 8915589C7242B51A A50AB6A28C2881CF FB90A90DFCDC0987 19BB7DEA4B6AFEF9 390980E3E396566C 8D364BC5623789D8 52B9E8B8CA17847F 1457A4BB8160BB0C 355A4DBFD2D5AA9D 83FF1A63A9E05F8A 8EB619304FE17CCC A80C956FD38C1BB9 D92EE82C364333C3 6E40A30C5198E40C A06B6C7699E28F06 E0E6007D32F1F93F 0122E12DE6D8D3CF 9A4571696AEB839B 5480FD2CBF414508 B2F360F8309443FC 3E375956640DAC65 8247F866E7D84ABF B3B43A44CF3EE65D D679305B9DF6303D 2780CC83C4AB6D2A B0CAAC6295D70357 AD69BB2DCFB54225 A326DF30A3370657 C186095F62E57DB7 3BB4CEB400E9DF8F 07204F2293EAFD45 E6732E624AD87B41 5227E4CCF28A790B FC6F0D600D1FCEB8 68D758D600A431F2 A4401BC15E22B290 80F6475A27C1B048 683C8B1CACCCC404 7648B42B4AD12A76 52FCB1DE61277135 BF40DAD3A176DDFD 8105B5F39291DFAC ED7EEF465D0D8A85 E7015B43B3491A97 36D11AFA23E825F2 97822A25404977C7 779371E5F14EC81D E8A6255CE1F31B27 B888C10565BCE0AD 9C9107113BF0B316 09AD8AFE345E50E5 BB0BA936496064BD 41003EBC832C34B4 45E530A7ACBACE3F BB812030EE2A948B D466ECEC51D7B888 D7AD25751CBA76DD 70DF664EE5EF817D 312F5CFE1AE2EE0B 42D8765ABA5275AB A53299AF825863BC 07A033293840BA91 A63268DCE326C1FE 76E29FE18F9D404A 62759AFC488CA1CF 62378B0AE3747C55 A90FEBFA3EEA3654 679582138C08D382 52CD2E73E4C8BFF5
  • Read the ciphertext. Strip whitespace: 2,256 hex characters = 1,128 bytes = 141 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210071305 (name+title). Key = MD5(password) = 8f2db92ea8dbff80da833613761a5024, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 35 GUIDs as hex (shown below).

Decrypted: GUID list

  1 42b93149-d1ae-7cc7-ac87-4b1fbae85e06
  2 6bd4efd3-4ba1-5111-a05a-20878603c6f5
  3 40abed9f-3209-1b15-836d-cab6f63b97db
  4 48ca9f40-6690-0c34-b066-df8983494d46
  5 3d306564-1c44-1b27-85d4-5f5966a490e3
  6 3158cd95-d022-0eb3-a6eb-46fc6375eda2
  7 8a296482-0549-3aa6-9acd-35c4d03513cd
  8 3927ae65-7314-10fc-87f6-f0a16e39f0fa
  9 af57e658-ea51-1206-90bf-480c93793a29
 10 c3fc5610-88ee-6168-b5ad-ab081b62ebe8
 11 cf69972f-0c34-0b75-a3db-861ae0c70df9
 12 01f2aa30-74f2-29a8-b223-62ec910bd846
 13 c6fe4adc-f591-6583-ba05-5fb2e2033571
 14 5b90033a-7715-25c7-a7cd-fa7a0c8dd533
 15 c7ef5983-3c38-4a1f-86c1-17702e8324d3
 16 2afd3392-9b92-7959-9e4a-648433b87f9b
 17 8124b514-e0e0-1aec-b40f-f812ed373881
 18 b5937ef4-1e0f-2add-9731-245267cdb9dc
 19 837dbc4c-e3ba-762c-be5d-051ba516f3ca
 20 e8c91cbf-1369-7bb2-afe3-1e6e8ab0e7b4
 21 a75acbb3-cf1f-0db2-a2c3-ed61c88b4566
 22 2b3ca648-a031-02ac-8674-72f18d0dc03c
 23 6e48fb47-9771-3f02-a57b-716d6b24d645
 24 9751a4b4-be0e-19a6-b9cf-42dc6a11d14e
 25 b57f7891-e7d3-89f9-ab0b-9e13d93243f6
 26 95ee20c9-92fc-43cc-af02-bad2bea69347
 27 b58f90b8-6d79-7626-9794-57c4efa47b8f
 28 4eef35a1-bf18-8bdc-97de-04e96c9028cd
 29 9f04f835-3926-2a59-bbbb-f6897c6aeecc
 30 bd592228-5216-6aad-8d88-d3ae27ea8256
 31 93cb8bb6-42c8-519e-9556-3d5be4381d50
 32 8b3c16c0-c427-6ce4-a421-7c9a5eab9ca8
 33 3711a7e6-4aae-4f03-b759-c15bab431ba0
 34 e51cb0ea-d185-7cae-832e-852493430353
 35 b18cf0d4-51f5-7641-a95f-9489c6940d62

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 75101031160262471277003184782656477. Exactly this sequence comes out of new Random(115).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 387 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 35; the post has N = 35 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results