A858DE45F56D9BC9 archive

201210260027 123wxy

explained decrypted filler

3DES(name+title) ECB, 40 GUIDs, seed 960

Metadata

Post ID
123wxy
Title
201210260027 → 2012-10-26 00:27 on A858's clock
Posted (UTC)
2012-10-26 04:27:17
Timezone
UTC−4 · title 00:27 against posted 04:27 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210260027) = d9ed23cf6464dbd4eae9971a6fa44785 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
40
Filler GUID seed
new Random(960).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
27 · predicted N = 40 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

3D28388B0966C7A2 270EAD04D49B8973 28AAEE3055F63442 D8F402AD6E4B3413 145F5D395A0AD473 D642B3ACEC7635CC C5B909C837682ABE B1A387B91B169D15 891BE2BC1AD27D1F 147A4363003E514F C0AEA4CDD852D332 323E9E912A802CF7 2E4BF732C4F03E5D 9D5C36571A9B7CAA 18E7553A2DB34195 FACFB4B34FB2C543 9EC7C6FA27D64CF6 B0317025D1A7A8CB F3226004308A89BD 96985580C3BE4AB3 EC1F10B88E01E4E7 269C018C41719CF6 05967579FC8CC77C 34500A189B9B7719 86C75A0A0192D778 028200C8A3891863 2EE89C39CE317B18 F106A0CBA33F6E90 267D8FF1C6297248 22F0908EE669B25D D7D8C81AD2129BF1 0BB1C22B5604233E 293076F84BFC2A25 C759CA7C819B6D06 9CC6B5ABA63961F8 CB6249A21F080E30 4C600C34245DDF63 B99DE9F2C5FFE748 BF4A2CFFAA5FF8E4 8F37DF724341735E A8817A49F68E0DE0 9FDD78046F7810B9 1AAD8835391D015C 05D221AC04E9EA0F 3F593C00ACBC279F EC62B666FCC8C5E9 DA8E7575B35F2C74 FA6A1F34FCA559B8 6340F49953AA1519 A2138A9E1B297571 268CBE08BAA4AB21 8C23B8CB0660A1BD A8353BCC81ED2891 B80AB6849E689CDE A61ACE16EAFC58A1 73460C4D6FB35B5C B0F7780B931B46C9 19564F783F950DEB 166E61F49D2C6819 00D858C9D773DAE5 5C84394FAFAAF1C7 117B9010FF13CCB1 FB5BB8BB410926E4 230147F56A2E35B4 A358B1F1E58FBD04 F890FAC37936D2FE DBDB0751077ECAD6 5A38701B59674B1D 555DA48AC5F8A5A9 49C17E32536CAA02 676B70581D45AAEA 9FF62D5E1A28B879 35DF0A9C60176752 80B45E797A70A01F B320C0934F531894 39F4B0CFD836B0C4 1E08972C94035E03 6BBA18FC5C88AEB0 67D4DB2714A2F212 8F86308BE3837F8C 059E457E43D85DDD 7A843E3A4F02988A 7FFC3AC3A9988655 4D99D06D55CC25FC 865F061A9DC074D2 D987ABE9D06E2F2A BF23822F8C2A9B5D E871CD32BFA64F09 2EBCE35E3A7DECF0 D6A0BE35FD16D589 CB67AAD805C15F38 C82A2BDBFADB4CEC 4B28F1D50F5DD813 4A3D85FCC66B7582 7C25C48862D4209B D9BACEC1A3152338 1C79C863CAD45554 1FF8B833981FF608 4313913A092CF787 9A43C05F035FCA27 341676DF5265B5F7 88E0CC52EBF6FD11 AC845D63C5A810C8 40A122119393EE99 14BD9B6358D7E292 50F0EFA766481014 2A965F27AD69DF9C C6C0631F3D3F6D33 F59551D952B0D716 279164D51C8A00A5 5D0F93A9475CC045 C84E6485C9FD1586 6EA4188457406596 790E2EB72FD9B7C0 E14945BD89C7B7B9 97D29215696CB6F1 2737DCAE543324F7 F4EBBD7D294FCE4F 6B78C0296079F981 1D78C40841B71B3E D5C7E624FBB054F7 7CC2DE7A81254589 1B7D6780EC458BA5 B66E9618868E82E7 B52765CEDF37DB7A 5F18E8522C7B7C85 850FE336F340E9CC EF243691B287DB6A 601158A9DD4926C5 1D857B545165AB6A 1B2503A6DA4C7DC3 67681806062CE8F6 4F6B3AE0A8BDF5D9 859EA0ABA205CDF7 55F9B1A92DF8B415 89918C579C2AAB2B D0B698AC26CB405C 9A3B3E23B1C36611 2B7902BDE56E71F4 225648D2DB8BA7EE A6ADA29A18E54358 BC389E0DDE23FBDD BB6B603EC887EFCE E687817C8078882E 6BDBB3BD51578CB1 89E1AE1DFBDF41B7 6B18F93603F87B0A F050A741B59B2E90 5ED0BF0CB2911997 B44E85F0710DA031 A302106EB4CCEE05 B5541775FEA74CA4 4F0022BC3BB60576 C91FD489F3E9E8D6 FB2110521FA41D21 75CD159D557F6E23 6BFC84AE0C1D7AB3 F4E2FBADC1E67916 4B7C84CDCE74F4ED 37072CC8781701E3 F0CDC5C398B88F8A
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210260027 (name+title). Key = MD5(password) = d9ed23cf6464dbd4eae9971a6fa44785, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a8e5d744-1338-210c-9738-81adb5c0076e
  2 055a9916-c29a-4972-b8cc-4597f695240d
  3 d6d14545-22c4-7a20-8802-8d3befb55769
  4 0b9a9bfa-3439-4917-8179-83915d75255d
  5 6a10cc11-9f9a-5cfa-96c3-72f762247ec1
  6 952f5afa-661b-4a12-9c38-89cad2f7251d
  7 6cf8a369-a58c-0db7-9ac6-9dc21294929d
  8 dfb708c6-e8cb-0c0f-a587-19160b613ecc
  9 a6da6eec-1092-6a55-abba-b046255963b4
 10 d7f53073-034f-2572-9ff9-02f95f40310b
 11 6e630713-72fa-494e-81cf-f0a967e707cd
 12 67962ce6-4e38-8fb9-bc20-0238dbf43436
 13 54f47558-c519-534d-b200-a0d399e2c21a
 14 53c24614-d869-86d2-be36-a9d30a147d12
 15 82824c38-c7c0-8c18-a6cf-a0c4ebd1bc29
 16 920d9117-fff1-5f5d-a865-4536b2654f38
 17 a09d3d38-b7a1-33c4-bfb8-512553ef476f
 18 877c3a55-ad8b-19b4-9712-658cd705b6d5
 19 2dbe8590-1b8c-5150-bfd8-556af7281f76
 20 5e65ada0-2c23-0519-a213-abd8afa0b379
 21 80dd0776-f3c4-3822-90f4-ff2551865854
 22 3716ede1-16ee-3308-ac27-823eb1a843c4
 23 35ce41b0-6271-215a-aad1-51292e50988a
 24 07d9d15e-2b9a-3ae7-920c-66bb69dab85a
 25 0f000921-185e-7a72-95e0-655aeb390b83
 26 53c23c0f-fc98-83df-a0fc-25b4cc0a1af4
 27 79e57dd1-4551-2b4e-87e4-c04cc72c6544
 28 f462b96d-fc76-4c19-ae87-d1c952125348
 29 a800752e-37f2-645d-927c-98edf60740b9
 30 c45b3d1e-09f3-20fe-91b0-5fe364afdcee
 31 c336a40f-12c0-5409-a342-00ac65e4d800
 32 598d4c0f-ad02-2fe9-beb7-a3d0aadd471a
 33 6745910f-8f1c-3608-90e0-f670d70ca5d5
 34 5d388b1e-a705-0977-aec6-a3e9bc31d324
 35 3fc86e20-fb63-7024-98ec-2c0ae6c25be2
 36 e37f3e25-e190-3b2a-bdd8-fdff169d9f9b
 37 5702d928-dee2-2d8f-9487-5272097bc995
 38 5143776d-3a69-54da-8339-2e378217e9d7
 39 f66fee2a-3218-6e20-9d35-77e4ec9ff5e3
 40 e282485a-6e4f-029c-a4a3-8e5303323366

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2474540062485885315033237824625230732560. Exactly this sequence comes out of new Random(960).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 27 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results