A858DE45F56D9BC9 archive

201210082026 1162ij

explained decrypted filler

3DES(name+title) ECB, 39 GUIDs, seed 100

Metadata

Post ID
1162ij
Title
201210082026 → 2012-10-08 20:26 on A858's clock
Posted (UTC)
2012-10-09 00:26:35
Timezone
UTC−4 · title 20:26 against posted 00:26 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,512 hex characters · 1,256 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210082026) = f87d6e46166a7cdcea7cf7e6ef678d5f (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
39
Filler GUID seed
new Random(100).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
481 · predicted N = 39 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

85F28E0A6E0DC65B 9D252A47817F2B31 063C34DF8145F7A3 027F16A818332BDB EF8DDDE9C3686C55 7C2620232795EB40 D7EE0B03D9BDDF3F 6B055209BA931C17 1BF69A6605198D01 4D54011A81C00558 46694CB9C60AEC43 E26676F1490DD403 A513534500B75CEF 40CEA946149CC8E0 4CE30614980F4CDA 1D2911AD920C162D BA9F71C46962C7D9 9F13112D4BED2EAC A8C8E5B8A20F8FB8 B46D7F1FFD0DA8BF CAB2122ED43263C6 C4CF13F7D873C881 267581F8C7C6BCC0 E381A34ED59D7253 E7735E8B98B89C4D 3A4C193AB02FCA6D 1667BC2A9213F292 93C90FD38FCC1BE2 604ADA4D7D9853AE 5EBFE19F2B944207 06431A419FA288A9 781822AE0964A736 4EC00AA657530E52 17B00E6659231EA1 2A838C34E4CDB597 E5623FCF6840AF01 659E6F4E0E89D2BC 7DC1DD1053FC4454 9ADA497608ED9D00 250CDCBE3AFA105D 8F6F1D7B0DD5DC23 343A234A3834D390 A20B3D64D83ECE47 37050ADAE0D8C628 A4728AB9E81D7C38 12933146899C07A4 BCE149221B9F2908 B788FCFC1EDB47E9 931A07CC114FA8A0 C137CF033F8342E2 645B0201E28F12DC 466F9FB407C7F515 3EE08022C0F91892 8AC39C9F3C788B82 02844B699EDFE56B 4D621E292E09967B 7148DF39C5820FE2 5E526B9825FE7C41 2E3E151B56CE0BBA B207DD010538C405 D926B69308092DB6 04A86F12167421BF 08A4FE87E67251B1 DB89693985E2F3BD 347CAEE1022C69B8 8A5441C54A4767FB 0728A3CBBCA187AD 0C54494AC40D14B3 752FE9A9D7CC8519 F69D494C5B7B4172 ECFEEFBCE02CDE5E 868A5855ECB541C9 037CCAD653E4800B F072B25814119FA3 46A24D0E9FCE2236 3F2FB73D62DE50E8 945418C50426F030 E868CB731EC8FF6B 90FB4986366B7776 EC8C307BA590F2B7 FFB9573EF8AE42C2 00A766A9B219C1A2 12448DBB030E0E30 32054F0B904F818D 7E4780A6C9610205 897771C54629484C BA824A541DCEA8EB D81554DD58A29D7B 7C225E939AE310AD 50DEF641024F41EA A636FEBD49264BAD 667D1282B75DD6AB 28FD34B48FF35F48 02AFA9BEC5C8AA54 099E09C01F8BDE09 073E9FB5026FDF0E D9452626BD811523 C4D77101A84AEB60 1F6A26EA6A2606E9 A3924BA9440F4E5B 4AB56E038285E309 B593C8ADDBEE5A9F 330C692AA632F015 4B96B392D4640837 01502870855480B6 DF7E0ECBFECA969D 7807D61986116C5A 9057332AC4563802 99C6E43B81BDBA5E CD0E51D898FC4ED2 862AB06D4DE7AD5E BCD9FC3BBC347C8F 71EBBA795575B790 B08E7417F6505033 14E3BC9DD987D20E 84A3AE35E8294CA3 3E9F97BA3068CB53 A26E2FEEC06E573C 05C553EB196C5544 11D94169E8B152A8 5E4952CCA6BB775D AC192B6BC00313A5 1708CCB5264AE53B E3C88C2838474A03 FC4FBCF3C7EC3213 170D0EAB752FF978 A01E51FE20E0D897 54B17050A10AE9A5 94C75684286AA2CE CA5ACBB8E176484C 2A08F96EEB2E5EBF 96D8FF286204DD93 49778BCDF2172E81 6EA1E201547A26AA 58ED84F143F26484 33A19C8BAB26B614 B57231B93B9CA879 292A1E2E2874CDAF 950AE68AA3D9B009 D71AA350FC1DE091 8B4EE2189261DCBE 0E1DFE14E3208D95 7E76D3156DD48462 8AF0323F322E2C65 47917FC30627C3A1 CB98780BD36F4833 768EB940BA5EC3DA 36025E3768F23A9D 06A8BFAF743430E8 E4F2ABA8E616F3D3 7956D850A5E5D828 8CA86272D8C54F35 FB27B8E0A06BDAB7 598BC8ED183D104D AAEC9B8C1E9B0A94 0CF6F78E8F4747C1 A34857197581C3AF
  • Read the ciphertext. Strip whitespace: 2,512 hex characters = 1,256 bytes = 157 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210082026 (name+title). Key = MD5(password) = f87d6e46166a7cdcea7cf7e6ef678d5f, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 39 GUIDs as hex (shown below).

Decrypted: GUID list

  1 24aaf294-baba-8a5c-82eb-0eb6606beef9
  2 c8f816ce-cd71-11d4-9ecc-918fe247f2c4
  3 d906b91b-8735-61a1-a34d-f0ca5ebdf5c8
  4 605f4847-c0e9-851b-86ab-b5069a8c52e9
  5 c6ff34c7-6ca3-3cd5-b135-1d6bed6ec3ae
  6 5eebd468-1eed-8c7c-a042-af7d0bf6f464
  7 b791eafb-9abf-6f85-b29c-aea4786bfb04
  8 c5029136-2257-5f41-b711-98c17a9f27c1
  9 6bce4af6-95e6-387a-bf72-5e3b5174cc8c
 10 b9485557-dd13-10e5-9ac7-4f65136700e8
 11 c584cb2c-f199-82f1-91ab-434c6e24e373
 12 63c649f9-db8e-4bd5-ad29-c47531cd8a51
 13 83ca8f83-6c52-383b-b102-2453b37c4ae7
 14 1df16494-ac7a-46a4-9d7e-d915805fa89d
 15 737d08fb-ffa2-8d03-98b4-79a70dd99ee3
 16 11cf272f-2d3e-4809-a822-7beebc4d7594
 17 d6078145-7741-88a1-9fa4-cc6a4e7df3e8
 18 ae05a330-ad79-8fcf-84fe-5db60650c7b4
 19 77cde419-9087-3c14-80c6-cba22ed873c1
 20 6bfc638b-2b8d-0f09-b515-e9ab401062c9
 21 71abce85-a3e5-0db4-bfca-12f486c9035a
 22 1aa13bbb-42a0-3884-90d1-0edb9db24d77
 23 e09a8c90-5939-8cfe-9a4a-521f966ed5eb
 24 8340f087-f19e-8257-8484-9611997cc4d3
 25 3919fc2d-2529-49f4-a974-dfe16d7591f7
 26 8cf8f92b-f44e-7483-9785-29b6bbae2164
 27 ca4ce231-5472-811a-a438-60800059fd6a
 28 a56a1af0-068f-53c5-b492-5a0a3e3fab8c
 29 1c2f8ec3-80d3-12f7-bb9b-437c7becf40a
 30 d911a250-0e82-5bed-bbce-979822cdc3d1
 31 7e4d65c8-34ab-02bd-bbd9-156a1f0e1cee
 32 6586d9cd-dded-7544-8278-e091a7323230
 33 b947a573-4b71-4595-aae9-531e15022d49
 34 abce30c8-4a15-48c2-b2e1-c8bff30838da
 35 9c8313c2-e965-553a-8158-18d50b39636b
 36 aa33e844-3634-0946-8fa4-37eb344240bb
 37 36eb8d6d-f907-7aee-aaf2-732a8d6354fd
 38 0c6c2612-904c-4f03-b73b-c78d922bf7d5
 39 8816ac9a-6684-45b2-b10a-b584fb7fb032

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 816838653184348488300388478515074450744. Exactly this sequence comes out of new Random(100).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 481 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 39; the post has N = 39 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results