A858DE45F56D9BC9 archive

201210252347 123uso

explained decrypted filler

3DES(name+title) ECB, 34 GUIDs, seed 681

Metadata

Post ID
123uso
Title
201210252347 → 2012-10-25 23:47 on A858's clock
Posted (UTC)
2012-10-26 03:47:01
Timezone
UTC−4 · title 23:47 against posted 03:47 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,192 hex characters · 1,096 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210252347) = d02058c8414e3daf319931238cd3d031 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
34
Filler GUID seed
new Random(681).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
7 · predicted N = 34 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

2AEEA2EF3C31ADE9 9DBFDA4B7D8F71EA 8D543AD9DC9ECC99 5C65139131F95FD2 7ABEEA7AFF42538A 428CA97C027929FD 06644CA7D0A47E9D 9D5A64B81C92B10F 55EB4A9A6E13C503 187020FADA9750E4 543ED89892FBA9C8 657B2A32E4781AB3 211C877144EF3DFC C4B8AE3767F9A460 05FCE69C772D58AE 19B90D378D23ED70 9F9FD15D71663458 E4CA7EB428D07C21 840092C3ED6AAFD2 4336D7044DB760C3 E3B4EB47AB9DBF80 8920032AE51480FD 5802819BA6756377 4BA011BEC1937A24 E0973A8C6DBA8ED7 3EFA76A10DA77867 BBA203DE8C80D52F AA1678E0A9601EF7 C2EC702AF249827D 8B069F18349552D8 012427DCA674176C 60E975D3F41477ED 97A770814D6E9873 C2B689A2066C9F39 8E84010ADBBB44AB EC013D2359092BCF 589BA18D08AEDED7 6B8D61CA8DE9F738 2336F4AB3F8920B8 8D2363F2BFB84203 E3B1B46173DFF4C3 14DE21E6F623974E 60A4CDD6647E71E9 C9290135806B2F81 A0ACBD3AEC5CE489 5C4A3E5209CB4B88 F783962D5B5035F0 FC59D0B5999D06C7 74A5EBB1F4202E5F C8DEDC4CBA51017F AE8B3B23D59203BB 2679BDA56C7B557F F0606A35294EA4BE 6168856067C2E280 7A9F4607DD43DACE 1473D1745FE36A85 2DEAEA07A42C315E 01F0FC17F5024817 1BED4D5B296E312F E989D1FD49DA416A 11C3722B792AF163 96D9ACC0F2FD5B67 7AF1931B33675FE1 E8A2110BB90DE583 EE0C29E88EAC91A8 4721A316B62BECFE F053E433B4FAEBA7 1C6490C97ED43AF2 49F97A4943AB8DBE 8CDCEF27C334F5A6 A7BFF4429D7AD89D 1DEF73B281CB7091 E10744BBF95D13B6 41CC0E4BEDCA39B0 BD8574B06CE33EEB F40C423683D0CA2C 8B3B7664FAAC7DD2 0C977A20EB16A131 0100E5E44965D0FD 9E078990EBEB3C84 79451B8DC49039ED 26178072B5C2F9F6 A44BC7F529277A8D 5B38060DC698F13D 64274DFFA49B834C BD36DAEC7322D6E0 02B5D5879541C014 9E7B686D3171BE2F 48A7751000FA836B E2FDE8AFD18B8EA0 A2884B8EFFD7AB94 51191F5AB6702575 5AD2ED855FB598D7 1818577EDE5ED1CD 1104EC9764BCB82F 4D1BB8EEE77081DA 0DABB09F048A78B2 8C64E47DAA961447 5E4C1DBE0C45FA51 A9F43074A2A1DFFF 3DC01F28BF9D3C59 354295E3472D0B53 A2139007ADCE2859 EE6379D56BE86F75 3B2D4158F4F16D00 E0CCE6EDECFBBF26 92B1267A37A84082 A61047995EDBAE43 8F299ADD2811B1BD A7677659013001C0 50DC098B7D157374 2D5E42D32D459B64 7276D624F1917F0E C50A05F36E69FEA2 6BD217ED6AA0228C FF963A636E375BA2 991C083289A6FCA4 88679163F3ECA35D 678DD203AC1448E1 3D54C238D2C5ECBA 161F03DCBDB607D0 525D5F3457848EF4 3D9C409C58DA8A44 2B94630688FF1DE9 4BFD6A6277DF4D84 FBE2DD2323415564 05C156C656E0CD9C ABCD6B8DA83C2002 B86789402A450F0D 75ECDD6EDBE1838E CFE6F5F913041C36 3A62702036849DAC D24492C83EBE8C2F 6F5AF43844D70ECB C967A58849EF729A 077ACB58BAD15AD1 D82214740FF3F1AE
  • Read the ciphertext. Strip whitespace: 2,192 hex characters = 1,096 bytes = 137 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210252347 (name+title). Key = MD5(password) = d02058c8414e3daf319931238cd3d031, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 34 GUIDs as hex (shown below).

Decrypted: GUID list

  1 843a1c97-f583-4210-97f5-f137a31b03a8
  2 b0cb618a-c604-5d62-a19e-a8eb9f57a86d
  3 4dc478d2-1cd3-7edd-a66a-2598c2048618
  4 50704158-5410-818d-a2b8-6e1715300832
  5 dd5c14e4-e9f8-6b16-86ad-7a80fda66bfb
  6 7a5a6ab5-fe33-6791-9984-459b9797d6b2
  7 6f494fbe-39bd-03c4-b23c-49c8cf227d3c
  8 54b245b5-2755-0e3e-8247-b5f6221f2b37
  9 c3692b5c-bc67-2072-8421-679f91aa5156
 10 36b0231a-80df-38c7-9420-5167cc9fd0c9
 11 98872bda-069c-0cf7-bc1d-b396457975c2
 12 0e29ea1e-ff97-171c-8c5a-c540443b5a93
 13 35274a85-f5c1-7348-b452-a6aae7dc51ed
 14 ae82b15f-f215-64a0-b2c1-a12a4c359e8f
 15 2695a8c5-190b-5365-b166-9493909f4e61
 16 c7c711af-a1d8-292a-a62b-995944d4ccbf
 17 0422f9a6-2b84-1631-9423-b546aa830c3d
 18 f0d5a6ec-b8be-1f9e-88b1-2d17f78a3f26
 19 4d501e71-7c3c-188c-8226-e36431ddabef
 20 5e56aec8-2df5-0ec7-8811-730f37385e0d
 21 da4d0cb6-4fb3-2991-9e9b-022fbc785c2b
 22 872f0682-064e-8fac-9f3d-c674d3b75d75
 23 1b95a4e1-8885-0f64-b7f4-dcf69c38de60
 24 5ade85ef-d874-80e5-95a4-9d8bdc0d880e
 25 6f98a612-9846-36d8-b4c0-c8ed55a06f50
 26 caa96fff-5bb8-4939-9690-ff6abf728611
 27 1b1904bf-33b3-39e3-8b25-7dd2ca1eea92
 28 35175b61-faaf-5c2d-9076-2384b2251d40
 29 e897dff8-c03d-5540-a47b-45cdfa0405d1
 30 7012303b-d6c0-4ede-991c-04d7cbc63f70
 31 27bf2849-1513-521c-b6c5-ac4c30c9a059
 32 dfe2e619-7699-7689-8f5b-f281da68eea5
 33 e96526bc-6d47-1cb3-b454-8a22f0f45871
 34 9757adff-c0d4-0825-9af5-8a30ea5b61af

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4578660023017652111028083435545710. Exactly this sequence comes out of new Random(681).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 7 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 34; the post has N = 34 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results