A858DE45F56D9BC9 archive

201210081626 115lpq

explained decrypted filler

3DES(name+title) ECB, 27 GUIDs, seed 630

Metadata

Post ID
115lpq
Title
201210081626 → 2012-10-08 16:26 on A858's clock
Posted (UTC)
2012-10-08 20:26:26
Timezone
UTC−4 · title 16:26 against posted 20:26 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,744 hex characters · 872 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210081626) = 6207cbb74982d6e6f23ab77a1a7f2b65 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
27
Filler GUID seed
new Random(630).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
469 · predicted N = 27 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

7868F71E2074DB18 094DE33F3EED8048 EB315A0E06073ED8 11E6304D675134EF 52717D459A119FB9 2CB83EA7078387A9 C0A090AA371BE364 A94E2BED8908787A 8B2B3AB119D1867D EDA3A881CF1BFD1E 42CF816896F95B20 111632478E22DCF6 28B1BB36DFE6423F 26F45489A54F2837 4E189AD1DB733F69 D080D053CFBBE1AA 71EBAA23F8537125 3156EEB5E26320B5 04F13731B0D98A16 B4FF72A9CC4C4825 319D4AEA4FA3BEBA 430D166A07A6F464 376C8DF700E34F0A 0A9AD6D5D3B9B03C 2E18DCD500694EBC 8931B9688B2AC473 A7FFC34187E219C7 E06FEDBD97000954 86A5BA5EAA0CC545 FE5CE8041D8AE189 4BADE621C9DB78DC 4023791AEE521D43 281D397010309094 7E3450A64809099B A74E911958D86983 D64BA4FD1AC686F5 E0265808894C7B22 CC52697F279E58A0 BB3DDAF9663C076C 6FB0BD976E6658CE 6CCD6AC2B4055A2E 44A8C04E8A0F10D5 54E8B318D1F9EF85 901D3F0F5C2CC6E7 49CAC331085E5045 E386E46BDFAF5431 5E72530911D61857 7634D4D3F79C6FE5 FCD0D7EBADE357A8 B73FDE591608013C B8A246900FAFFAF0 CA86DF70CABC67D0 B061EFE4B8C358F8 2BB7A122E3398219 FDDE1800143CFABF 344DB3F21DE401D8 245598779BE5279A FB69E9B274A3D661 2B8668B3C4E63D65 89816D8728AF8140 BD2EA9433CE7C27D 96D24B0764623AE4 DC035370B9FA356D 3AFF502A6C2FF6D1 933700B2E67E637A 7723A6A13D5ADCAB 1233C09D79890842 E91E2F9CC95D4E34 68E854C0CADE5781 C5955FBA623115A6 5F1FE19CA8327A09 7862063810AC923A 111C07C9B8C901C8 86B9D22783707561 091CD1FC6A314596 682A985B8A868DEF 0C4C0B1339F63BE5 DE6B05CDC64DC91C 4761DC67966F168C 535904A08A308BF5 0C8EB12E5BBD473E 5D449BC8B3847A14 10DE6D6F6EECAAC6 31ECC886F095389D 34BDBDE1B516FA92 7B75B38B01C500CE 91CDFDE32C445C9C 9B0547E8F5C1113C DE0AD7296F6869F3 C856B07A7D6E755A ED8939D3F7C9B8C5 588EAAC200B64907 BC43A8C0946D6364 ADC08850BE254DC7 D4B5EDA5D93C9164 79016244B0E3BCE0 E05F40856F465268 1A84C54409E66F07 B4C313B29599491E 725C1D3F67C3DACE 5F374C5F0964243B 7AF52F7200B19C00 5E4DBCF0D82741B4 6253EAF161C638F9 AC7F53E5774421A9 03335956573A88C1 9E21CD0802876596 6C17EECC91C86E97 84D6D206FC63AFDA
  • Read the ciphertext. Strip whitespace: 1,744 hex characters = 872 bytes = 109 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210081626 (name+title). Key = MD5(password) = 6207cbb74982d6e6f23ab77a1a7f2b65, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 27 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b0fdbf8c-4711-7684-b891-bb3973bccece
  2 6f1c89b4-4d4d-674b-8350-c818ee107a18
  3 263a3eaa-927c-1a9a-9960-66a2f7c9dac1
  4 60c8f82b-c0fe-0516-94b1-703def6b89b5
  5 39920b4a-df61-58de-99b4-72516afdeeca
  6 8350e737-cc06-18ea-8c24-a55fac817793
  7 64681f6b-b840-11de-864e-3568f37bbbcf
  8 820a2d90-d8a8-4cbf-9b2c-5f5f0143f8a3
  9 7f6ec9da-56a3-8f49-8590-50fedc8cd1b7
 10 52bb8c9d-1936-5412-af5e-8d7a6bf42a08
 11 70fa7d1d-3932-3863-8438-e94f7a9f6f63
 12 59babb50-6278-2946-b61a-588a17b3452d
 13 db82a0be-5572-6f0e-9c05-5d74d9e57402
 14 e959dfc4-fff4-2411-9bc8-4decc0a09dd4
 15 247f0d6f-c8ef-80aa-9432-219667f200f4
 16 3d5ca1fd-9b1b-4ea3-9d31-7c19929d189e
 17 40f7e724-51db-6ca4-bd0e-dbb5760cc6b2
 18 fe1e3cab-fae5-5124-93ce-e9013bbe2550
 19 b4d2058c-51cf-64f4-9cc4-90efd47a8bc3
 20 7553a67f-ecc2-2cf8-a38e-c7b638a66f5d
 21 5b49e868-7fed-4927-84b1-9df276b3d19e
 22 c14dd7d2-450e-32b2-8c5a-2bd0f3e41fd2
 23 054dc59d-8aac-4179-8f06-4181dd457bb4
 24 0b0ad456-a838-1b8b-a8dd-83102e28e193
 25 19febc59-d019-3169-ad57-31ad16115c51
 26 271fbaa6-e44b-67b0-8eb5-09da7e5bdb71
 27 c5120886-f6b6-56dc-93d7-d0afc70ae835

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 761051148532628465624341365. Exactly this sequence comes out of new Random(630).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 469 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 27; the post has N = 27 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results