A858DE45F56D9BC9 archive

201210071825 113v9t

explained decrypted filler

3DES(name+title) ECB, 30 GUIDs, seed 296

Metadata

Post ID
113v9t
Title
201210071825 → 2012-10-07 18:25 on A858's clock
Posted (UTC)
2012-10-07 22:25:28
Timezone
UTC−4 · title 18:25 against posted 22:25 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,936 hex characters · 968 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210071825) = 9defecab08097fe33a018a2078df9020 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
30
Filler GUID seed
new Random(296).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
403 · predicted N = 30 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

6EDBA77A8B912EBD 051D11B78DA14180 BC8E376869109C45 BF76C3D17B19E939 1F6BED9869EA30FB A2E3EFC0324AD04F D2F9B5F915DCD6A8 C7835B0E2BCF6490 569CA1A33B23969F 7816FAF37A363B19 0083918CA5B93CC3 84419FB2893426E2 EEA335F246BAEA72 5A15B6374D99165E 371F9AB48DBDCF73 31976D5BDE3D907B CEA9034280AE1B5E 69ABD37E82AE05B9 88BB62D9597804DF 3A3213324C4B1C74 1C98991198D27F29 1DB6C1B4DDA46559 43C531616986B3AA FAEB92A0319DAE7B 83A2C31C951C305A F7930C75C4E7942C 71BFA72440143FF2 A594A36C5927E800 3676659CD5E4263B 2BFA18A4148284ED 0FC55600E71D3633 817FDF82E791AA2C 2FD138DC74FAC40F 33254ABE53CBBDCA 6667A49691C751C2 5404E3D9B68F1059 DCA74328608E5972 F2E511F8462CDA49 3064B866CB12772C 280A4DDCA3FFC9B1 AF2F6D60035C9CE3 E704581D32662C96 48A954E5622C0B3A EBE5748925C0DCA7 0140256784625A81 E32CE28094A4D5C1 D9D062D6B0DABE54 A36BDD6CDEAE4DF6 73B8A807A624E084 376B4349222B4778 C2A00348F74784C6 C8C82088E4C1246F D469F1A9B6BC0BBE E2FAA07959680F2C 2670FD2E6AC80CF8 F0BB185A4044D25B 8F6F670C8DE18BE6 F391B27D217DB853 C4F64F850FE004B2 ECAC06E2FC2BE760 D16BC86BE80C0A45 A79C90E2751A0E3A 4A9F8612DF7396DF F9643E9D04A57C4C ACCCBB65E72C7613 61EBCBE262520AD8 0B0F237FDAFAE11F 54F2606159CE3827 1FFDFF1C44CA6775 D66FD48C61027CC0 2FC75FFEB9563505 ACB6D67F12FDADE8 99973ADF56711DDD E40E63373ACFC016 226B00DE13F7B011 4AFDFC7325A39E74 A32D9F92FD8E97C1 B2BF676B8C03C168 782C68760D8D15A1 AFF57C465A997075 65395794CB061134 DACB17EAAA6A386B 3B9873B177C6563A 19922651697DCF18 9E6550B4C7FDD8A6 5C28B76E978E9F70 54B128D7C4CC9882 4022BA2F905FC716 5AD8835ED422069C 34986C5F6AC842B2 67DD7F854D4B4D4B 6B65272BBE4DFDF6 324C52F3A082F1B3 16858A370E1A2F80 C0C9820CDEA86FE9 8BD9F2B63ECA3D94 FAF7A5CCA3F2FB9E B312E17E2AA9918A F6D98B5B6E249A58 832FAE4403E5542E 92F5F9B5E83C8523 6C0198F5D4E74E89 96D39CE3DAB25719 0BDF53443869EF3E A17BEE1C337DCFED BF638A74D3BF2332 CC359DDF2C19A72A EEC572A2BE05F71C BB75B261CFF8E593 BAAECD03B83611AE 9C47D1F10EAFFD14 4C802614E2A094F0 9E8F9A7FE9B27356 192F3DB3F4D616B5 5C7470B447E51641 A01EB0FDE43A0321 4579E4247036161E 310A5BCF99AF0A01 3AFB50ECA81F5A92 4D9D04A6DB638777 7FE4000E29EB22DA
  • Read the ciphertext. Strip whitespace: 1,936 hex characters = 968 bytes = 121 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210071825 (name+title). Key = MD5(password) = 9defecab08097fe33a018a2078df9020, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 30 GUIDs as hex (shown below).

Decrypted: GUID list

  1 dbeb7af3-eaba-311a-8235-dd75e91f8a7a
  2 1d89b799-85a6-6e5e-b097-93efe0aa6a5d
  3 c1079a0a-6135-6eff-9bdd-cd9b457fdf20
  4 94ce9012-d1ed-6110-bca7-a1b83fa2b9aa
  5 a5ec60d8-06af-774c-a7f7-5bd1a945fead
  6 1fb8771a-b77b-2d6e-b1c7-e1e221f16579
  7 4dd15e8e-f916-40c7-abcd-2e28b217bcb0
  8 78027b52-0625-83ba-8ff0-eb949171893c
  9 6c058f2e-b114-52a3-a5e2-a8996ddd32e0
 10 bc5b9550-2031-3dea-a255-8816f77d9460
 11 c2ddbe68-3125-3327-9d62-486a975e5b9b
 12 6dcc922b-bfd8-53cf-ab36-83da5cbc4c62
 13 711cc6bb-e179-123a-81b4-be6e421c0f30
 14 08e47c3f-0f8c-4c68-92e1-cd98d316955d
 15 862e4a2c-d899-1556-862a-d093c42736cf
 16 bca54d72-7cb4-7f37-a1e1-02cdfa1bd22c
 17 e82daf3d-6ce3-255b-bffd-2e7be0607313
 18 6ea006cb-6614-4e32-90ea-b6536a3646ee
 19 69ae96a2-c29e-6473-a5aa-5e77aff1db73
 20 292d8432-b773-84ef-8052-62223ae474c0
 21 c7ad978b-8a01-1194-90a3-33da1ac71ba5
 22 3fc8c622-dfe3-4420-96fd-08e21c595c36
 23 6c23be8a-ab77-010c-a643-dd3d2ea61ea5
 24 e2db7daa-ee07-321e-b848-7c333f2e4e71
 25 b0158ed9-0342-6177-9167-c12abf7ed5a3
 26 6661eaba-6f10-8f18-8ecc-478bfe982a02
 27 49649d53-15fe-3018-89b1-831a26fd5d94
 28 f77c1427-d992-09a1-b80a-398e74fa80e1
 29 61a7601a-ae76-2274-a930-ced77b9e8e58
 30 88b4bb48-7f81-459c-8bea-bec8f6bac29c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 366672485335141724681403683024. Exactly this sequence comes out of new Random(296).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 403 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 30; the post has N = 30 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results