A858DE45F56D9BC9 archive

201210080906 114w48

explained decrypted filler

3DES(name+title) ECB, 30 GUIDs, seed 276

Metadata

Post ID
114w48
Title
201210080906 → 2012-10-08 09:06 on A858's clock
Posted (UTC)
2012-10-08 13:06:00
Timezone
UTC−4 · title 09:06 against posted 13:06 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,936 hex characters · 968 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210080906) = d0d9ec2beb2d78c130d02d1aac4ec33d (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
30
Filler GUID seed
new Random(276).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
447 · predicted N = 30 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

26EF5206AB140435 256F8A14A6487C4B 9D00F4C5E0C0098C 8BE0E387768FA9F6 11A169EFFD6F425C CCBAFFABBABB44BF 0FC2EC9D6A5F85A4 A7805F58E571F2D5 2DD779903C14CAB1 E9D824627E1C9F08 F653697C172D90DC 8F62712649306F02 D687E37D847C0097 35DEB9AA00141EDF 962E2C03A5D018A8 EE07AE68599D753C 0E8F262345BF8BA1 31B19D59A41A6A4B AC84AFDCDEB6F81B D43697BA47FFB2D0 4EE28C6F207795F8 C92065F0C831A42A 786CBB74A3C58D40 4E158A5396956617 02F2DDFCF8BF4ACE 7AF09D4D8F8B59E6 9DF59D55A0A3C8C5 4EABAA638BF3184E DB9DBEA5036FB23B 62C87CEC7E12673D EF9011906EFB1FE7 43A92AA49525F0E7 23E0F3CC4132D3EF 5EAE9039E4A5F8ED 893F2D3901047016 F545D772DBCAB931 F139C5AA7B5E6A52 6B69F1463C01CDC9 16FEC6EF4BF7B709 EFAD6FE8699E0C09 78DA1003DC3EF821 DFD12671B867D4E8 1F86985EB3D5B2F9 CB7210016CEC563B 35CA3BEE0CDEB12F 06D923D54AFEB9FA BCD3594115307CAB 721D039754E27EE6 19716212C028684D EDDF82380E6E2411 5FE196C1B4270BF8 710CF26ECDFCD3EC 45ACD8B10A859AAB 84E9F981CCFF5DD5 CA4FF755325CC4AA 9A98AB94F0498C2A 92E033495695995D CD5A85C8DD57A152 5E97B4E6FA3927B7 BB6113B8ADB8942B BAA48863D9EAB818 7D1D119F3887C4E6 6F436F68C2932C5A CDB5C55D69DC2CC0 679A6CAB7585B539 FFE63873B5815727 CC1FE420C1375AEA A4E221434732C68F B57EB16602AD51F6 58FEF220F362E903 EE23A8689117C91C 7AA8B462CF61D25F ECD77B9E5F9DE62D DE5F58A25619B959 CF9AA6EE1C61ADFF 1D9ED6581C3FD17F D0544751BF54F618 1EE43151F0305699 CF6E0DFFE6B3EF21 8766F2B342356CA0 B53EB638824CEF1E 01E6911CB2988072 BE97946CCC99DF07 ABD47398F957CE1B B4D2CCEA71B813AD 2903CB6BBAF12707 0E64FFDD8367027E A2ACC7CB69F1EC89 FD05947EBCE6F06F 3F9676522DBACBEB B7014B3773E33434 08BA18474D822D40 183BCD0AA1A5AA48 1BA89E3EEBB540BC 8254F735EFAC9C9E A01C3E7F211CAC47 B63523E7B0DF27EF 3F093A2146E975E0 317A6B4DE342E610 5AA5036EFDC65888 5B1C698066A27854 1E16633CB562B893 9161C47471C8A02C 5DD5DFFFBF4AA06E 6DC379A5101A53EF 9086CE3F0DE98552 E474CAC32891FF09 E3465E9C3CF6EAE1 C9BAEB4351CC7ABD 9253ADDFAE35643D 33B7BA180443F9B8 F05ED41EC557B3EF 0794CDDBC9586310 5AB203D0E9961989 A9089AAF76768FC2 F6DF547CAD5EB8AF F4014B642C93F021 494E7D6C2DC9C39A 67DA00A48DBCA202 B0DD1B0F9DBC322A 1FEAD6DB3FB3BCF6
  • Read the ciphertext. Strip whitespace: 1,936 hex characters = 968 bytes = 121 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210080906 (name+title). Key = MD5(password) = d0d9ec2beb2d78c130d02d1aac4ec33d, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 30 GUIDs as hex (shown below).

Decrypted: GUID list

  1 8a5381ed-0ad7-8ff4-ba55-83630edc94bf
  2 210d50dd-6135-7682-80e5-3d66c767e5f0
  3 3f366f3d-db22-6449-9c4b-598fc490bf26
  4 f1224c8b-8240-46f3-8c21-4a641b39033d
  5 092c8fd8-632c-7ecf-ab15-69e3386678db
  6 9f4aa246-1a0b-6f61-b321-7618dd1c4bdb
  7 81005496-5ec2-5b58-a6f4-8bc651767750
  8 559068d5-1da3-86fb-88a1-00fd7fc05082
  9 a5899d89-5c7a-1a2a-a0d7-97bb39a3da5e
 10 1ee8035f-e488-0fb3-8cfa-9292a86aee3f
 11 fbf03a1f-2aec-5081-9c6c-2696a11d522b
 12 a84978da-5719-889e-ac2f-2bca992ab975
 13 55e2233b-3cfd-38c9-8714-e9b4414e4770
 14 572c5d83-006b-0727-9bee-38d00a4df18c
 15 ce5750bb-acd4-17d9-b0ae-8d9325ffab12
 16 462b9116-ac38-3121-bf8f-34e0d89ba02a
 17 4238af8f-2028-77c4-a728-b116bb3fd0f7
 18 f1c89bc5-1d16-1702-820f-ea332da61139
 19 32da9101-db0f-1577-8424-735681402749
 20 2f7a4646-a83b-1b4e-bbcd-2bb5b39761a8
 21 d20c5301-c3a5-49a8-8d75-94ef2e0a5baa
 22 341aa373-593a-528a-b39d-990d52460893
 23 23c77251-01ac-5e26-b29a-af4b32bdabc3
 24 71bd6eb7-e86f-45de-a9c4-58dd821179cf
 25 873b5956-af7c-66d3-baea-dc1a06062432
 26 637cd594-ec01-0d21-9244-0f972a0f9ce4
 27 95bf0609-245b-20c1-9117-360e82d7109a
 28 4f86ecd1-b3c4-6ee8-84b0-4fe40d225321
 29 0afc7813-b309-7e6a-b7a8-bd0a9c30c058
 30 18f20446-2142-33ba-92ef-6763139ff0aa

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 876476581058301371114554602673. Exactly this sequence comes out of new Random(276).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 447 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 30; the post has N = 30 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results